last executing test programs: 19m20.045726487s ago: executing program 32 (id=8861): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 17m40.696119453s ago: executing program 33 (id=9820): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2}}, {{&(0x7f0000000140)=@x25, 0x80, &(0x7f0000000640)=[{&(0x7f00000001c0)=""/234, 0xea}, {&(0x7f0000000740)=""/219, 0xdb}, {&(0x7f00000003c0)=""/131, 0x83}, {&(0x7f0000000480)=""/168, 0xa8}, {&(0x7f0000000540)=""/248, 0xf8}], 0x5, &(0x7f0000000040)}, 0x6}], 0x40001b2, 0x712, 0x0) sendfile(r1, r0, 0x0, 0x578410eb) 17m8.183848647s ago: executing program 34 (id=10128): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) fchdir(r0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000200)={0x7}, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x10000, 0x0) fsetxattr$trusted_overlay_opaque(r1, &(0x7f00000001c0), 0x0, 0x0, 0x1) 15m38.507214204s ago: executing program 35 (id=10895): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r1) sendmsg$nl_route_sched(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001dc0)=@newchain={0x484, 0x64, 0xf09d2fbf8b68c555, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x8}, {0xfff1, 0xd}, {0x9, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x7, 0xa}}]}}, @filter_kind_options=@f_flower={{0xb}, {0x43c, 0x2, [@TCA_FLOWER_ACT={0x3ec, 0x3, [@m_ife={0x148, 0x7, 0x0, 0x0, {{0x8}, {0x5c, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x200}, @TCA_IFE_METALST={0x2c, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x6}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x800}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_TYPE={0x6, 0x5, 0xffff}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xe, 0x5, 0x100, 0xad1}}}]}, {0xc5, 0x6, "698d4d8dc6262dd71a76700f810bb4c29e821464b482e7fb0db1912a55034f9237db3036f477e4ece7c516b7871319846564302c106f3a42ffc3f04d60096c0e44afee1aa66f7aaa03cca40261026bf7c46121144b4d6f808c7bc4adea8fa8da5b1e4219c6f4e1f56ef6d966ef885fae50e592c91e5b7c2f595d34413947a87201571d27994195ad614fd91345e5dd9961713b95301ea98058622e1f7b8d1a983456e22a2801df213d44afdf0f6d7eeaeeab7c6a6ed9ac37c904388d2810126449"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_bpf={0xb8, 0x14, 0x0, 0x0, {{0x8}, {0x4}, {0x8d, 0x6, "00c3f0876e94149d3a336c36ff62dfe98e1613ada1c4f7ff265ce4cc53a62fdcefda58d6f84090a1ad758f385db03f28572b3252f22dd5893d61cc514bc22128985a22d95fc545d3e9091a766eeea8dafe79ef0a8dcf71d03cf10bfcd9ed3edcb49308587aa0a2f37438d5acaa6edca8626bb4a0e0bc1ad186cda1a683fbf2aa820b5e8ffbe3df90c7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ct={0xc4, 0x11, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_ACTION={0x6, 0x3, 0x10}]}, {0x89, 0x6, "daea1cfbcd5ad1fca578e22ebaf4245f37e0760afdd2c826d2965523a5d4ff2cfc94fc6a2e825195ad37f3c1beff551e123c1fd6beeefe022c5a8b0c51fea0dd55bd304378e24e2e30471ca0e9f214bfad065664e3f75acb7d9f10ff373e1ffc2891c046176d24eca532aaeb92c45f21aae0f4005a984966b464098cad7ec98a22aea736d7"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_xt={0x124, 0x5, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xfffffffa}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_HOOK={0x8, 0x2, 0x6}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffb}]}, {0xda, 0x6, "0a5bd0de3d78576fd0a8b20cd62cef9a5fa14c2fe8f65a7b5813b8006805b430233dfc25a757046bffa4046fa55e61f8a94e3394ab438deca90c8c540da661b4abb1d748ad44fdd7ca5c56d3a2aea5c07b24ee9908282cf3dda010e6df890aed31be855ff23330865972cc4992fd5ce419d58d587e620187a5d3349962c52c7c17cf03d63448bd9933885721d03dd8ccad3e7843a33e6262a6be5a2ccf23376f340800377a8ac2b06b9406944f7fee6a503ff8e388c4b14851e9ec8553fcc4c2111c28b7e17347a35b1a52bc2cf6f1df91021ef702c4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x1d}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @loopback}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0xff, 0x0, 0xff]}, @TCA_FLOWER_KEY_IP_TOS_MASK={0x5}, @TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffffffff, 0x0, 0xffffff00, 0xffffff00]}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}]}}]}, 0x484}, 0x1, 0x0, 0x0, 0x80}, 0x44000) 13m27.719509702s ago: executing program 36 (id=12094): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000040)={0x6, @raw_data="e20d12b5106d6334ca3d88db4ac9519298f93658132eef30ac9fad56d34e80705d161196a991f8628b29fdd809218a051c0ac2b43af9f7abc76374ec19ed45ae12f8b3cc26301e139d1ba1adfa6408686a542ef604311a130d3c6c459c95c69831dddec2030cd01c2ac6d43240f11d6bb70fca4fbb47ad04e701c6a275c6d61eff0fbc935493435597c423d8204ba86411c2ce452558f186b4e36554d88d006f61f9be29c5186f938d8673c2cbba5438def1d7a2e08d0d8fd15dd14d220d05f1c4dd6204c6658f0b"}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec970005183c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 11m47.796332292s ago: executing program 37 (id=12797): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r1, 0x6) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 9m44.95087397s ago: executing program 38 (id=13539): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff7f, 0x0, 0x1, 0x0, 0x0, 0x20000045}, 0x204c080) r0 = syz_io_uring_setup(0x24ff, &(0x7f0000000300)={0x0, 0xf36e, 0x10100, 0x0, 0xfffffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0x40, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) 9m39.706039116s ago: executing program 9 (id=13569): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x8ff, &(0x7f0000000a00)={0x0, 0x7d10, 0x80, 0x3, 0x1000034f}, &(0x7f0000000040)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x2}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 9m39.196445665s ago: executing program 9 (id=13574): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="f1", 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x3f9, 0x4) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=""/25, 0x19}}], 0x1, 0x1000000000fe, 0x0) 9m38.983805753s ago: executing program 9 (id=13575): r0 = fanotify_init(0x200, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x71, 0x40000009, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r2, 0x0, 0x100000000) 9m38.562876759s ago: executing program 9 (id=13580): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000007c0)="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", 0x2000, &(0x7f00000005c0)={&(0x7f0000000340)={0x50, 0x0, 0x40, {0x7, 0x28, 0x7f, 0x9010, 0x0, 0x0, 0x400, 0x3, 0x0, 0x0, 0x0, 0x10001}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x1000) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f0000000100)={0x50, 0xffffffffffffff8c, 0x0, {0x7, 0x2b, 0x1, 0x300900, 0x0, 0x3, 0x5, 0xded, 0x0, 0x0, 0x0, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9m38.234680818s ago: executing program 9 (id=13581): io_setup(0x81, &(0x7f00000000c0)) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa0800093f3f0c0000140001"], 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r2, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 9m37.547405323s ago: executing program 9 (id=13585): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000180), 0xc06620, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) pselect6(0x65, &(0x7f0000000180)={0xfffffffffffffffd, 0x3}, 0x0, 0x0, 0x0, 0x0) 9m37.087938358s ago: executing program 39 (id=13585): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000180), 0xc06620, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) pselect6(0x65, &(0x7f0000000180)={0xfffffffffffffffd, 0x3}, 0x0, 0x0, 0x0, 0x0) 8m22.668225016s ago: executing program 2 (id=13996): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002a00)=@delchain={0x24, 0x66, 0xf31, 0x3, 0x0, {0x0, 0x0, 0x0, r3, {0x9}, {0x0, 0xffff}}}, 0x24}}, 0x0) 8m22.392377675s ago: executing program 2 (id=13999): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$inet6(r1, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)="ab5c54320c2e9c5d8b310187dca39a24", 0x10}], 0x1}}], 0x1, 0x84) r2 = syz_io_uring_setup(0x902, &(0x7f0000000640)={0x0, 0x92e2, 0x8, 0xfffffffd, 0x40000333}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 8m12.811179524s ago: executing program 2 (id=14041): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x498, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x0, 0x54}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x1, 0x4000000000000, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 8m10.735230802s ago: executing program 2 (id=14048): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x72, 0x80000}, 0x20) 8m9.681642429s ago: executing program 2 (id=14055): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x800}, 0x4000010) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x3e8, 0x0, 0xfffffffffffffd25) 8m9.367645571s ago: executing program 2 (id=14058): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}, 0x1, 0x0, 0x0, 0xc00}, 0x0) r0 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100, 0x0, 0x3ad}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/120, 0x78}], 0x1) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) 8m6.718439938s ago: executing program 40 (id=14058): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}, 0x1, 0x0, 0x0, 0xc00}, 0x0) r0 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100, 0x0, 0x3ad}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/120, 0x78}], 0x1) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) 6m52.860785901s ago: executing program 3 (id=14373): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)={0xfffffffe, 0x6, 0x372, 0x3, 0xd, "40cb4400000000000000021700"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000018c0)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7fffffffffffffff}, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) writev(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000040)="dd60", 0x2}], 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x10001, 0x0, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x4, 0x0, 0xfffffffffffffffe, 0x9, 0x0, 0x0, 0x0, 0x7], 0xdddd1000, 0x80146}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m52.72057978s ago: executing program 3 (id=14374): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000001440)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r3, 0xfffffffffffffc01, 0x0) tee(r0, r3, 0x60000000000, 0x0) 6m51.456959566s ago: executing program 3 (id=14379): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4, {0xa0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shutdown(0xffffffffffffffff, 0x2) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f00)={0x2c, &(0x7f0000000cc0)={0x20, 0x1, 0x5, "82fecdff60"}, 0x0, 0x0, 0x0, 0x0}) 6m48.410250706s ago: executing program 3 (id=14393): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 6m47.443974421s ago: executing program 3 (id=14395): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x8b92, 0x100, 0x0, 0x232}, &(0x7f0000000340)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x60, 0x10, r0, 0x0, 0x0, 0x0, 0x40000300, 0x0, {0x1}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 6m46.3597009s ago: executing program 3 (id=14401): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$unix(r3, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) 6m45.673581492s ago: executing program 41 (id=14401): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$unix(r3, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) 6m19.943860438s ago: executing program 4 (id=14495): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="1858b036410f017d0048b8dc4b13b61e0b813a0f23d80f21f835c00000a00f23f8660f2263c4c17c773666420f3a428ce80c00000000fa3e3e6767450f01cf6536460f01f8c422d1b7900000c0fe", 0x4e}], 0xaaaaaaaaaaaab65, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6m19.698424701s ago: executing program 4 (id=14497): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) close(0xffffffffffffffff) write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000000, 0x10012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 6m19.438415722s ago: executing program 4 (id=14500): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x4000, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 6m19.263796151s ago: executing program 4 (id=14502): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') 6m19.119266168s ago: executing program 4 (id=14504): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r3, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x0) 6m18.44757142s ago: executing program 4 (id=14508): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x303}, "0400", "0d07080d004fcf0000e8ffff1a8600", "cf0d00", "8657e2b7e43b34e4"}, 0x28) write$binfmt_script(r0, &(0x7f0000000300), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0x1}], 0x1) 6m17.799018524s ago: executing program 42 (id=14508): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x303}, "0400", "0d07080d004fcf0000e8ffff1a8600", "cf0d00", "8657e2b7e43b34e4"}, 0x28) write$binfmt_script(r0, &(0x7f0000000300), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0x1}], 0x1) 4m11.995089127s ago: executing program 1 (id=15011): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x680, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) prctl$PR_SET_MM(0x4e, 0xa, &(0x7f00002d5000/0x2000)=nil) syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x58, 0x69, 0x4, 0x20, 0x413, 0x6a05, 0x58fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x40, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0xa2, 0x0, 0x0, 0xdb, 0x34, 0xd5, 0x3}}]}}]}}, 0x0) 4m10.380045845s ago: executing program 1 (id=15015): socket$kcm(0x10, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x80002, 0x0) socket(0x80000000000000a, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = gettid() sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r0, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 4m8.628007326s ago: executing program 1 (id=15020): syz_open_dev$sndctrl(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x14) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) 4m5.382912032s ago: executing program 1 (id=15030): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) 4m4.13975746s ago: executing program 1 (id=15032): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) 4m3.046970527s ago: executing program 1 (id=15037): unshare(0x2040400) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = epoll_create1(0x80000) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000005c0)={0x4}) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r2, 0x47f5, 0x0, 0x0, 0x0, 0x0) 4m1.901833666s ago: executing program 43 (id=15037): unshare(0x2040400) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = epoll_create1(0x80000) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000005c0)={0x4}) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r2, 0x47f5, 0x0, 0x0, 0x0, 0x0) 9.74260133s ago: executing program 8 (id=15748): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000001000/0x1000)=nil, 0x1002, 0x1, 0x8012, r1, 0x83000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_setup(0x3fe, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)=' -', 0x3fffff}]) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$cont(0x7, r3, 0x10000000000005, 0x7) capset(&(0x7f0000000080)={0x20071026, r3}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) capget(0x0, 0x0) 8.489095651s ago: executing program 6 (id=15750): syz_emit_ethernet(0x90, 0x0, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20142, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x670d76dee23647d4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8.086041106s ago: executing program 8 (id=15753): socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f00000000c0)={0x3, @vbi={0x200, 0xba8, 0x1000, 0x34524742, [0x7, 0x3], [0x4, 0x101], 0x10b}}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="080641663151c9e0ad01"], 0x1c) r3 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r2, &(0x7f0000000100), 0xfef0) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0) 7.772934514s ago: executing program 8 (id=15755): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x12, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b80)={0x34, &(0x7f00000009c0)={0x40, 0x11, 0x1, '$'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x20, 0x8, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 7.617780467s ago: executing program 6 (id=15756): socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000500)={0xc, 0x1, 0x80000000, 0x80000000, &(0x7f00000000c0)=[{}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x3855, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) poll(&(0x7f0000000080)=[{r3, 0x20}], 0x1, 0xfbe) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000000c0)={0x2, @tick=0x8001, 0x7, {0x3, 0xbb}, 0x3d, 0x2, 0x9}) io_uring_enter(r1, 0x847ba, 0x0, 0x2e, 0x0, 0x0) 7.314073974s ago: executing program 0 (id=15757): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x60100, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$sock(r1, 0x0, 0x0, 0x4080) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001e80)='/proc/vmstat\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000001ec0)={0x2020}, 0x2020) lseek(0xffffffffffffffff, 0x2, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x2, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, 0x0, 0x40000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c81, 0x4) 7.007908s ago: executing program 7 (id=15758): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast1}}}, 0x88) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 6.809095178s ago: executing program 5 (id=15759): r0 = epoll_create(0x7) r1 = epoll_create1(0x0) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) r3 = epoll_create1(0x0) r4 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r6, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000200)) 6.735398911s ago: executing program 0 (id=15760): socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r6, 0x2, {0x1, 0x0, 0x5}}, 0x18) timer_settime(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r5) 6.416566421s ago: executing program 6 (id=15761): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4733, 0x10100, 0x0, 0x24d, 0x0, r1}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x1200}, 0x1}) io_uring_enter(r2, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000005dc0)=[{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001d40)="d8750288189987d0fa", 0x9}], 0x1}], 0x1, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6}, 0x18) connect$can_j1939(r5, &(0x7f0000000140)={0x1d, r6, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r5, &(0x7f0000003e40), 0x3fffffffffffe3d, 0x0) 5.645698381s ago: executing program 5 (id=15762): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f00000000c0), 0x0) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_CLOCK(r3, 0x8030ae7c, &(0x7f0000000040)) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@uexit={0x0, 0x18, 0x40000000000000}], 0x18}) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4140aecd, &(0x7f0000000000)) 5.552424175s ago: executing program 0 (id=15763): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = openat$cgroup(r0, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000340)='syz0\x00', 0x1ff) mkdirat$cgroup(r1, &(0x7f00000000c0)='syz1\x00', 0x1ff) r3 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) 5.172861472s ago: executing program 7 (id=15764): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000005180)={0x2020}, 0x2020) 4.697957729s ago: executing program 0 (id=15765): mknod(0x0, 0x8001420, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r2, &(0x7f0000000180)=[{&(0x7f00000003c0)="8c", 0x1}, {&(0x7f0000000000)="9624", 0x2}], 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 4.672455993s ago: executing program 6 (id=15766): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x100}, 0x1c, &(0x7f0000000280)=[{0x0}], 0x1}}], 0x1, 0x20000084) shutdown(r2, 0x1) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = syz_io_uring_setup(0x12ab, &(0x7f0000000140)={0x0, 0x7495, 0x0, 0x2, 0x1f7}, &(0x7f0000000380)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @private=0xa010102}}, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) 4.608348239s ago: executing program 7 (id=15767): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x692, &(0x7f0000000280)={0x0, 0xb2ef, 0x80, 0x3, 0x145}) syz_clone(0xc98b0700, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)={0xa04c, 0x35e8b534, 0x1, 0x18, 0x13, "53af0f0b4ece6c29bf81c173f4a8f5f73eb62f"}) 3.304620499s ago: executing program 5 (id=15768): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, '\x00', "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = socket$unix(0x1, 0x5, 0x0) r3 = dup2(r2, r1) close_range(r3, 0xffffffffffffffff, 0x0) 3.1937648s ago: executing program 8 (id=15769): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) close(r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c400)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000200)={0x50, 0x0, r2, {0x7, 0x1f, 0xffffffff, 0x21a028b, 0x1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000a3c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0x0, 0x0, {0x410000003, 0x10, 0x0, {0x0, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8001, 0x0, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000006100)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x7, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9, 0x0, 0x0, 0x2ca, 0x0, r0}, &(0x7f0000000240)=0x0, &(0x7f0000001080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x19, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x200}}) io_uring_enter(r4, 0xdb4, 0x0, 0x0, 0x0, 0x0) 2.815503096s ago: executing program 5 (id=15770): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x169142, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x58b9808bbcfa107b, 0x12, r0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000080)="64f30f00d83ef30f6fb5799e0f01c42e2e2ef30f093667663667676726660f383046380f090f18d90fc75c09baf80c66b8544b8d8766f6efeffc0c66b8f2ffffff66efbaf80c66b8c0669d8966efbafc0c66ed", 0x53}], 0x1, 0xa9, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.697234084s ago: executing program 6 (id=15771): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='fuseblk\x00', &(0x7f0000000200)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000580)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xec,\xd5\xfd,\xce`\x9f\x92\xb4\xbe\x06?\xaa\x16Q\x94\x15\xbe\x80E\x9c\x93Hq?<(+\xceb0\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849S\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xe4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;', &(0x7f0000000180), 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='\xd9\x04\x00\x00\x00\x00\x00\x02', &(0x7f0000000100)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\x1c@\\\x00', &(0x7f0000000780)='\x00\n\x9c\xdf\xcf\xddB\f\x85@]r\xfe\xc7^P\xd8`\x85\xf7\xff\xf4\xa8\xf81\xf8\x1fY\x83\xd9ut\xa4\xcd\xf1\x17\xdd\x8a\xb2\r\xdc\xab\xd4\xaeHS\x13\x03yb\xe6\xd6\xa1CX$\x055\x82\xdc+j\xae\xf7\xa46\x06\x8d\xcf\a\x0f1\x9a\x05\xdd\x91\xd5b\xef[\x17\x87\x9c\xd0\x16D\\\xe6].\xd9I\xaeQn\xf7\xd3J\x90{\xbdEIx\xe8\rS\f\xfc\xdeb}R\xf3\xf6_\xf4\xc6\xfc', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='(!\xef(.(\\-]\x00', &(0x7f0000000080)='\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000240)='fuseblk\x00', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000440)='\x00', &(0x7f0000000500)='^,/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000480)='fuseblk\x00', &(0x7f00000004c0)='\x1c@\\\x00', 0x0) read(r0, 0x0, 0x0) close(r0) 2.357345505s ago: executing program 6 (id=15772): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r3 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000001000000010000"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r3, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 2.0507454s ago: executing program 8 (id=15773): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000300)=@mangle={'mangle\x00', 0x1f, 0x6, 0x530, 0x2d8, 0x2d8, 0x0, 0x1c8, 0xd8, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, &(0x7f0000000280), {[{{@ip={@remote, @multicast1, 0xffffffff, 0xffffff00, 'pimreg0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x84, 0x2, 0x9}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x3, 0x6, 0x1, 0x0, 0x1, 0x6], 0x2, 0x2}}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x5, 0xffffff81, @broadcast, 0x4e21}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x100fffffe, '\x00', 'geneve1\x00', {}, {0xff}, 0x2, 0x2, 0x2}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@ah={{0x30}, {[0x0, 0x9], 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'veth1_macvtap\x00', {0x7}}}}, {{@ip={@multicast1, @empty, 0xffffff00, 0xffffffff, 'team0\x00', 'pimreg\x00', {}, {0xff}}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast, 0xff, 0x2, [0xc, 0x14, 0x2a, 0x10, 0x23, 0x2c, 0x2e, 0x7, 0x2, 0x35, 0x3f, 0x2a, 0x9, 0x11, 0x36, 0x1], 0x2, 0x2, 0x8}}}, {{@uncond, 0x0, 0x98, 0xc8, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x73}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x7f, @broadcast, 0x4e20}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x590) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000080)=@assoc_value, 0x8) r1 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={&(0x7f0000000440)="c4a23d0643b9f0430fc079fff3460f1ec9f081035c000000f30faed446a900000000660f7ed238c461915492db8876efa1efa12eb22d233333f30fa7d0", 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) poll(0x0, 0x0, 0xffff7fff) tkill(r1, 0x16) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x10009, 0x9}, &(0x7f0000000140)=0xc) fanotify_mark(0xffffffffffffffff, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00') 1.993925048s ago: executing program 7 (id=15774): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a400000001c0a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003"], 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000030000000900010073797a310000000020000000020a01040000000000000000000000000900010073797a3000000000340000001f0a030000000000000000000300000008000340000000000900010073797a3100000000090002"], 0x9c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c07ef540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB, @ANYRES32], 0x90}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x76, &(0x7f0000000640)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0086dd60f5509b00403a0054f8a442c41ccd2b00000000000000bbff020000000000000000000000000009020090787fffffff6050835900000000fc000000000000000000000000440000000000000000000000000000002000003a000000000000000401000000000000"], 0x0) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x103902, 0x0) sendfile(r4, r4, 0x0, 0x20004) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f00000005c0)=0x4, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, &(0x7f0000000040), &(0x7f0000000540)}, 0x20) 1.396558474s ago: executing program 0 (id=15775): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x64040, 0xd0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000200)={0x0, 0x707b, 0x400, 0x2, 0x40288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r2, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x40000120, 0x4aa52520f215cfe4, {0x2}}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_enter(r4, 0x154e, 0x0, 0x41, 0x0, 0x0) 1.262183046s ago: executing program 5 (id=15776): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0xdc, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_EXPR={0x38, 0x11, 0x0, 0x1, @objref={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x12}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0x68, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_DESC_CONCAT={0x4c, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffefc5}]}, {0x4}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x104}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.230509861s ago: executing program 7 (id=15777): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 603.560198ms ago: executing program 7 (id=15778): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000240)=0x3) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b000100000000090408000103000000", @ANYBLOB="8fcf"], 0x0) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) 441.693413ms ago: executing program 5 (id=15779): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}], 0x18}, 0x0) write$binfmt_script(r3, &(0x7f0000000600), 0xfec8) recvmmsg(r3, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000a80)=""/218, 0xfeb8}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, 0x0) 406.20506ms ago: executing program 8 (id=15780): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0xfffffffd}}, 0x10) bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(r5, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0) 0s ago: executing program 0 (id=15781): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}, {&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893c711167b6aee1ac4a8cc59d92a394f460b20f21b9add9e84d2dba9e6df8034c449e64138a4aea2a8df6d35031bd3263f", 0x7fffefff}], 0x2}], 0x1, 0x0) kernel console output (not intermixed with test programs): usb 5-1: usb_control_msg returned -32 [ 1345.923370][T27733] usbtmc 5-1:16.0: can't read capabilities [ 1345.955595][ T5926] usb 2-1: usb_control_msg returned -32 [ 1345.977837][ T5926] usbtmc 2-1:16.0: can't read capabilities [ 1346.161030][T27733] usb 5-1: USB disconnect, device number 65 [ 1346.461106][ T6185] __nla_validate_parse: 2 callbacks suppressed [ 1346.461124][ T6185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13824'. [ 1346.470586][ T6185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13824'. [ 1347.920781][ T6246] netlink: 'syz.4.13836': attribute type 1 has an invalid length. [ 1347.936977][ T5926] usb 2-1: USB disconnect, device number 113 [ 1348.036122][ T6264] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13836'. [ 1348.191487][ T6254] bond3 (unregistering): Released all slaves [ 1348.696112][ T6264] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1349.724867][ T6413] syzkaller1: entered promiscuous mode [ 1349.734077][ T6413] syzkaller1: entered allmulticast mode [ 1350.265535][ T5843] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1350.487841][ T5843] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x68, changing to 0x8 [ 1350.534181][ T5843] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 36872, setting to 1024 [ 1350.574069][ T5843] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1024 [ 1350.614122][ T5843] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1350.717257][ T5843] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1350.747429][ T5843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1350.784249][ T5843] usb 5-1: Product: syz [ 1350.803474][ T5843] usb 5-1: Manufacturer: syz [ 1350.823363][ T5843] usb 5-1: SerialNumber: syz [ 1350.871367][ T6425] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1350.967965][ T6461] syzkaller0: entered promiscuous mode [ 1350.973508][ T6461] syzkaller0: entered allmulticast mode [ 1351.109592][ T5843] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 66 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1351.324830][ C1] usblp0: nonzero write bulk status received: -71 [ 1351.336977][ T5843] usb 5-1: USB disconnect, device number 66 [ 1351.355542][ T5843] usblp0: removed [ 1351.927345][ T10] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1352.140884][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1352.174575][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1352.221730][ T10] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1352.238043][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.289082][ T10] usb 2-1: Product: syz [ 1352.314500][ T10] usb 2-1: Manufacturer: syz [ 1352.319180][ T10] usb 2-1: SerialNumber: syz [ 1352.338779][ T10] usb 2-1: config 0 descriptor?? [ 1352.366939][ T10] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1352.402851][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1352.414935][ T10] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1352.447270][ T10] usb 2-1: media controller created [ 1352.527225][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1352.755982][ T10] DVB: Unable to find symbol tda10046_attach() [ 1352.762233][ T10] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1352.824259][ T10] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1353.061486][ T6558] kvm: pic: non byte write [ 1353.467929][ T6572] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13868'. [ 1354.190113][ T10] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1354.231965][ T10] usb 2-1: USB disconnect, device number 114 [ 1355.194980][ T5926] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1355.375527][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1355.410511][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1355.444348][ T5926] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1355.500706][ T5926] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1355.541873][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1355.581647][ T5926] usb 3-1: config 0 descriptor?? [ 1355.763791][ T6666] veth1_to_bond: entered allmulticast mode [ 1355.770357][ T6667] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13885'. [ 1356.011835][ T5926] plantronics 0003:047F:FFFF.00DA: unknown main item tag 0x0 [ 1356.084788][ T5926] plantronics 0003:047F:FFFF.00DA: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1356.122920][ T6665] veth1_to_bond: left allmulticast mode [ 1356.380325][ T6702] usb usb8: usbfs: process 6702 (syz.0.13887) did not claim interface 0 before use [ 1357.384363][ T5926] usb 3-1: reset high-speed USB device number 109 using dummy_hcd [ 1358.165192][ T10] usb 3-1: USB disconnect, device number 109 [ 1361.600767][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.637393][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.259803][ T6900] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1362.349666][ T6900] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1364.273001][ T6975] input: syz0 as /devices/virtual/input/input161 [ 1365.302836][ T7004] bridge_slave_0: left promiscuous mode [ 1365.347283][ T7004] bridge0: port 1(bridge_slave_0) entered disabled state [ 1365.393122][ T7006] netlink: 'syz.2.13940': attribute type 10 has an invalid length. [ 1365.450113][ T7004] bridge_slave_1: left promiscuous mode [ 1365.488069][ T7004] bridge0: port 2(bridge_slave_1) entered disabled state [ 1365.573719][ T7004] bond0: (slave bond_slave_0): Releasing backup interface [ 1365.599722][ T7004] bond0: (slave bond_slave_1): Releasing backup interface [ 1365.633772][ T7004] team0: Port device team_slave_0 removed [ 1365.679317][ T7004] team0: Port device team_slave_1 removed [ 1365.698408][ T7004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1365.728760][ T7004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1365.748213][ T7004] bond1: (slave geneve2): Releasing active interface [ 1365.783109][ T7004] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1365.815040][ T7004] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1365.885905][ T7004] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1365.919749][ T7004] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1366.012130][ T7006] bond0: left allmulticast mode [ 1366.093093][ T7006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1366.194492][ T7006] bond0: entered allmulticast mode [ 1366.244375][ T7006] team0: Port device bond0 added [ 1367.234907][ T7041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13947'. [ 1367.256946][ T7041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13947'. [ 1367.342034][ T7041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13947'. [ 1367.384933][ T7050] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13949'. [ 1367.758638][ T7041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13947'. [ 1367.769566][ T7041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13947'. [ 1367.786899][ T7041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13947'. [ 1367.932731][ T7059] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13951'. [ 1369.802446][ T5926] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1370.014281][ T5926] usb 5-1: Using ep0 maxpacket: 16 [ 1370.059727][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1370.100366][ T5926] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1370.121897][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.139009][ T5926] usb 5-1: Product: syz [ 1370.143345][ T5926] usb 5-1: Manufacturer: syz [ 1370.152891][ T5926] usb 5-1: SerialNumber: syz [ 1370.174448][ T5926] usb 5-1: config 0 descriptor?? [ 1370.206159][ T5926] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1370.274001][ T5926] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 1370.378954][ T7170] netlink: 'syz.0.13972': attribute type 6 has an invalid length. [ 1370.437105][ T7170] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13972'. [ 1370.838975][ T5926] em28xx 5-1:0.0: chip ID is em2874 [ 1371.253810][ T7204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13978'. [ 1371.864525][ T5926] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1371.872625][ T5926] em28xx 5-1:0.0: board has no eeprom [ 1371.955743][ T5926] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1371.970623][ T5926] em28xx 5-1:0.0: dvb set to bulk mode. [ 1371.985345][ T10] em28xx 5-1:0.0: Binding DVB extension [ 1372.010808][ T5926] usb 5-1: USB disconnect, device number 67 [ 1372.021640][ T5926] em28xx 5-1:0.0: Disconnecting em28xx [ 1372.194807][ T10] em28xx 5-1:0.0: Registering input extension [ 1372.334288][ T10] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 1372.342632][ T10] Registered IR keymap rc-empty [ 1372.377326][ T10] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1372.412160][ T10] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input162 [ 1372.457538][ T10] em28xx 5-1:0.0: Input extension successfully initialized [ 1372.466528][ T5926] em28xx 5-1:0.0: Closing input extension [ 1372.573719][ T5926] em28xx 5-1:0.0: Freeing device [ 1373.476711][ T7331] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13996'. [ 1374.232556][ T7383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14000'. [ 1374.689941][ T7395] input: syz1 as /devices/virtual/input/input163 [ 1374.700577][ T7393] netlink: 36 bytes leftover after parsing attributes in process `syz.6.14002'. [ 1374.726995][ T7393] netlink: 41 bytes leftover after parsing attributes in process `syz.6.14002'. [ 1374.991912][ T30] audit: type=1326 audit(1751073150.832:9067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7404 comm="syz.6.14005" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb97f8e929 code=0x0 [ 1375.204345][T27733] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1375.387335][T27733] usb 5-1: Using ep0 maxpacket: 8 [ 1375.426950][T27733] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1375.485713][T27733] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1375.515844][T27733] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1375.546788][T27733] usb 5-1: Product: syz [ 1375.551035][T27733] usb 5-1: Manufacturer: syz [ 1375.556847][T27733] usb 5-1: SerialNumber: syz [ 1375.736128][ T3480] team0: Port device team_slave_0 removed [ 1375.930590][T27733] usb 5-1: palm_os_3_probe - error -110 getting connection information [ 1375.962363][T27733] visor 5-1:1.0: probe with driver visor failed with error -110 [ 1376.086332][ T5926] usb 5-1: USB disconnect, device number 68 [ 1377.402814][ T7492] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1379.674179][ T10] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1379.894019][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 1379.916085][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1379.969076][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1380.042559][ T10] usb 2-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 1380.087324][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1380.138050][ T10] usb 2-1: config 0 descriptor?? [ 1380.666806][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 1380.674358][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1380.711317][ T10] usb 2-1: USB disconnect, device number 115 [ 1384.388114][ T7652] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (3800 ns). Using initial count to start timer. [ 1384.512197][ T7656] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1386.733435][ T7744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14057'. [ 1389.513103][ T7843] bridge_slave_0: left allmulticast mode [ 1389.555748][ T7843] bridge_slave_0: left promiscuous mode [ 1389.561606][ T7843] bridge0: port 1(bridge_slave_0) entered disabled state [ 1389.606246][ T7849] netlink: 'syz.1.14063': attribute type 10 has an invalid length. [ 1389.693373][ T7843] bridge_slave_1: left allmulticast mode [ 1389.723965][ T7843] bridge_slave_1: left promiscuous mode [ 1389.740725][ T7843] bridge0: port 2(bridge_slave_1) entered disabled state [ 1389.914755][ T7843] bond0: (slave bond_slave_0): Releasing backup interface [ 1390.138705][ T7843] bond0: (slave bond_slave_1): Releasing backup interface [ 1390.193068][ T7843] team0: Port device team_slave_1 removed [ 1390.200275][ T7843] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1390.208711][ T7843] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1390.219470][ T7758] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1390.230964][ T7758] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1390.240215][ T7758] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1390.246508][ T7843] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1390.248592][ T7758] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1390.262597][ T7758] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1390.308842][ T7843] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1390.498598][ T7877] fuse: Bad value for 'fd' [ 1390.587706][ T7849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1390.606531][ T7849] team0: Port device bond0 added [ 1391.616422][ T7875] chnl_net:caif_netlink_parms(): no params data found [ 1391.737369][ T8017] tipc: Started in network mode [ 1391.754020][ T5843] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1391.754532][ T8017] tipc: Node identity 7f000001, cluster identity 4711 [ 1391.776888][ T8017] tipc: Enabled bearer , priority 0 [ 1391.925583][ T5843] usb 2-1: Using ep0 maxpacket: 8 [ 1391.956904][ T5843] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1391.970182][ T7875] bridge0: port 1(bridge_slave_0) entered blocking state [ 1391.979081][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1391.995693][ T7875] bridge0: port 1(bridge_slave_0) entered disabled state [ 1392.003160][ T7875] bridge_slave_0: entered allmulticast mode [ 1392.009237][ T5843] usb 2-1: Product: syz [ 1392.013466][ T5843] usb 2-1: Manufacturer: syz [ 1392.021406][ T7875] bridge_slave_0: entered promiscuous mode [ 1392.028798][ T5843] usb 2-1: SerialNumber: syz [ 1392.039460][ T7875] bridge0: port 2(bridge_slave_1) entered blocking state [ 1392.049865][ T5843] usb 2-1: config 0 descriptor?? [ 1392.067093][ T7875] bridge0: port 2(bridge_slave_1) entered disabled state [ 1392.075125][ T7875] bridge_slave_1: entered allmulticast mode [ 1392.083478][ T7875] bridge_slave_1: entered promiscuous mode [ 1392.200185][ T7875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1392.250921][ T7875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1392.271609][ T5843] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1392.315245][ T7758] Bluetooth: hci4: command tx timeout [ 1392.446333][ T8134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14077'. [ 1392.471931][ T7875] team0: Port device team_slave_0 added [ 1392.600093][ T7875] team0: Port device team_slave_1 added [ 1392.762305][ T7875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1392.778082][ T10] tipc: Node number set to 2130706433 [ 1392.791691][ T7875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1392.826414][ T7875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1392.859759][ T7875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1392.878493][ T7875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1392.986460][ T7875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1393.198049][ T7875] hsr_slave_0: entered promiscuous mode [ 1393.213946][ T7875] hsr_slave_1: entered promiscuous mode [ 1393.230665][ T7875] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1393.248744][ T7875] Cannot create hsr debugfs directory [ 1393.326671][ T5843] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1393.537539][ T5843] usb 2-1: USB disconnect, device number 116 [ 1394.054745][ T8288] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 1394.394190][ T7758] Bluetooth: hci4: command tx timeout [ 1394.534085][ T5835] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1394.717147][ T8326] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1394.746548][ T5835] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1394.788869][ T5835] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1394.834730][ T5835] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1394.877188][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1394.919824][ T8302] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1395.002100][ T5835] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1395.802815][ T5926] usb 2-1: USB disconnect, device number 117 [ 1396.474352][ T7758] Bluetooth: hci4: command tx timeout [ 1396.853981][ T5843] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1397.024156][ T5843] usb 2-1: Using ep0 maxpacket: 8 [ 1397.033323][ T5843] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1397.059821][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1397.076476][ T5843] usb 2-1: config 0 descriptor?? [ 1397.121658][ T7875] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1397.202295][ T7875] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1397.254576][ T7875] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1397.293260][ T5843] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1397.309937][ T7875] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1397.639359][ T7875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1397.777186][ T7875] 8021q: adding VLAN 0 to HW filter on device team0 [ 1397.826602][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 1397.833805][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1397.889139][T18918] bridge0: port 2(bridge_slave_1) entered blocking state [ 1397.896333][T18918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1398.192231][ T7875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1398.353110][ T7875] veth0_vlan: entered promiscuous mode [ 1398.392857][ T7875] veth1_vlan: entered promiscuous mode [ 1398.537230][ T7875] veth0_macvtap: entered promiscuous mode [ 1398.554889][ T7758] Bluetooth: hci4: command tx timeout [ 1398.588836][ T7875] veth1_macvtap: entered promiscuous mode [ 1398.723073][ T7875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1398.750657][ T7875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1398.817074][ T7875] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1398.851982][ T7875] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1398.871088][ T7875] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1398.891831][ T7875] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1398.936417][ T5843] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 1398.968025][ T5843] asix 2-1:0.0: probe with driver asix failed with error -71 [ 1399.073711][ T5843] usb 2-1: USB disconnect, device number 118 [ 1399.460540][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1399.854295][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1400.302255][ T3480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1400.330735][ T3480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1401.141145][ T8567] netlink: 2048 bytes leftover after parsing attributes in process `syz.3.14060'. [ 1401.208694][ T8567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14060'. [ 1402.843741][ T8628] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14115'. [ 1405.404285][T27733] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1405.570538][T27733] usb 4-1: config 0 has an invalid interface number: 98 but max is 0 [ 1405.675221][T27733] usb 4-1: config 0 has no interface number 0 [ 1405.732294][T27733] usb 4-1: config 0 interface 98 has no altsetting 0 [ 1405.751682][T27733] usb 4-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 1405.761717][T27733] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.770208][T27733] usb 4-1: Product: syz [ 1405.782400][T27733] usb 4-1: Manufacturer: syz [ 1405.787421][T27733] usb 4-1: SerialNumber: syz [ 1405.797578][T27733] usb 4-1: config 0 descriptor?? [ 1406.134529][T27733] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 1406.184011][ T5926] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1406.353799][ T5926] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1406.364107][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1406.372193][ T5926] usb 5-1: Product: syz [ 1406.380088][ T5926] usb 5-1: Manufacturer: syz [ 1406.392685][ T5926] usb 5-1: SerialNumber: syz [ 1406.473392][ T5926] usb 5-1: config 0 descriptor?? [ 1406.576103][ T5926] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1406.754029][T27733] usb 4-1: reset high-speed USB device number 117 using dummy_hcd [ 1407.139886][T27733] usb 4-1: failed to restore interface 98 altsetting 4 (error=-71) [ 1407.184389][T27733] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware [ 1407.216853][T27733] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 1407.225423][ T5942] usb 4-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 1407.260131][ T5942] usb 4-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 1407.307226][T27733] usb 4-1: USB disconnect, device number 117 [ 1408.417115][ T5926] usb 5-1: USB disconnect, device number 69 [ 1409.533969][ T10] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1410.048043][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1410.077369][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1410.103973][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1410.338192][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1410.409257][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1410.484587][ T10] usb 5-1: config 0 descriptor?? [ 1410.960832][ T10] plantronics 0003:047F:FFFF.00DB: unknown main item tag 0x0 [ 1410.999508][ T10] plantronics 0003:047F:FFFF.00DB: unknown main item tag 0x0 [ 1411.098781][ T10] plantronics 0003:047F:FFFF.00DB: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1411.246644][ T10] usb 5-1: USB disconnect, device number 70 [ 1411.444356][ T8897] fido_id[8897]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1414.581743][ T8991] netlink: 'syz.3.14161': attribute type 1 has an invalid length. [ 1414.645553][ T8991] netlink: 3 bytes leftover after parsing attributes in process `syz.3.14161'. [ 1414.696861][ T8993] netlink: 3 bytes leftover after parsing attributes in process `syz.3.14161'. [ 1414.830416][ T8991] batadv1: entered promiscuous mode [ 1414.877685][ T7758] Bluetooth: hci3: command 0x0406 tx timeout [ 1414.894983][ T8991] batadv1: entered allmulticast mode [ 1415.085743][ T8993] batadv1: entered promiscuous mode [ 1415.140761][ T8993] batadv1: entered allmulticast mode [ 1415.884122][ T5843] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1416.083658][ T5843] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1416.129571][ T5843] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1416.383309][ T5843] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1416.497354][ T5843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1416.558507][ T5843] usb 5-1: config 0 descriptor?? [ 1417.354346][ T3124] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1417.517818][ T3124] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1417.546387][ T3124] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1417.566563][ T3124] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1417.579872][ T3124] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1417.589152][ T3124] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1417.613117][ T3124] usb 4-1: config 0 descriptor?? [ 1417.916462][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1418.174674][ T3124] plantronics 0003:047F:FFFF.00DC: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1418.367955][ T5843] usb 4-1: USB disconnect, device number 118 [ 1418.662494][ T5835] usb 5-1: USB disconnect, device number 71 [ 1418.703023][ T9137] fido_id[9137]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1420.484010][ T923] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1420.653991][ T923] usb 5-1: Using ep0 maxpacket: 16 [ 1420.667321][ T923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1420.682880][ T923] usb 5-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 1420.693552][ T923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1420.729525][ T923] usb 5-1: config 0 descriptor?? [ 1421.163728][ T923] hid-led 0003:1294:1320.00DD: unknown main item tag 0x0 [ 1421.177081][ T923] hid-led 0003:1294:1320.00DD: unknown main item tag 0x0 [ 1421.186685][ T923] hid-led 0003:1294:1320.00DD: unknown main item tag 0x0 [ 1421.193770][ T923] hid-led 0003:1294:1320.00DD: unknown main item tag 0x0 [ 1421.209066][ T923] hid-led 0003:1294:1320.00DD: unknown main item tag 0x0 [ 1421.227475][ T923] hid-led 0003:1294:1320.00DD: hidraw0: USB HID v0.03 Device [HID 1294:1320] on usb-dummy_hcd.4-1/input0 [ 1421.283099][ T923] hid-led 0003:1294:1320.00DD: Riso Kagaku Webmail Notifier initialized [ 1421.384588][ T9227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1421.422700][ T9227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1421.444311][ T923] usb 5-1: USB disconnect, device number 72 [ 1421.474461][ T1159] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 1421.488548][ T1159] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 1421.500111][T18918] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 1421.882319][ T9310] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1423.050984][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.072759][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.719907][ T9351] sg_write: data in/out 4194269/42 bytes for SCSI command 0x5-- guessing data in; [ 1423.719907][ T9351] program syz.0.14205 not setting count and/or reply_len properly [ 1424.311379][ T9379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14211'. [ 1424.558580][ T9369] cgroup: fork rejected by pids controller in /syz0 [ 1424.650295][ T9393] batadv1: entered promiscuous mode [ 1425.118419][ T2933] Bluetooth: hci0: command 0x0406 tx timeout [ 1425.809847][ T9450] block device autoloading is deprecated and will be removed. [ 1425.812306][ T4167] block device autoloading is deprecated and will be removed. [ 1425.821788][ T9450] syz.1.14217: attempt to access beyond end of device [ 1425.821788][ T9450] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1426.334954][ T9481] netlink: 'syz.1.14222': attribute type 2 has an invalid length. [ 1426.351625][ T9481] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.14222'. [ 1426.904270][ T5835] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1427.063997][ T5835] usb 2-1: Using ep0 maxpacket: 32 [ 1427.071258][ T9519] ip6gre1: entered allmulticast mode [ 1427.078609][ T5835] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1427.104894][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1427.132722][ T5835] usb 2-1: config 0 descriptor?? [ 1427.169055][ T5835] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1427.974202][ T5835] gspca_sunplus: reg_w_riv err -71 [ 1427.992542][ T5835] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 1428.021589][ T5835] usb 2-1: USB disconnect, device number 119 [ 1428.474151][ T923] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1428.644420][ T923] usb 4-1: Using ep0 maxpacket: 8 [ 1428.668693][ T923] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1428.704102][ T923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.713689][ T923] usb 4-1: Product: syz [ 1428.729132][ T923] usb 4-1: Manufacturer: syz [ 1428.733819][ T923] usb 4-1: SerialNumber: syz [ 1428.746533][ T923] usb 4-1: config 0 descriptor?? [ 1428.969008][ T923] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1429.861075][ T923] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1429.904582][ T923] usb 4-1: USB disconnect, device number 119 [ 1430.095682][ T9653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14239'. [ 1430.139114][ T9653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14239'. [ 1432.904599][ T9728] netlink: 24 bytes leftover after parsing attributes in process `syz.6.14253'. [ 1436.366334][ T9821] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14269'. [ 1437.684023][ T923] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1437.914322][ T923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1437.933168][ T923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1437.966548][ T923] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1438.103349][ T923] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1438.133956][ T923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1438.194363][ T923] usb 5-1: config 0 descriptor?? [ 1438.633156][ T923] plantronics 0003:047F:FFFF.00DE: unknown main item tag 0x6 [ 1438.706591][ T923] plantronics 0003:047F:FFFF.00DE: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1440.064003][ T923] usb 5-1: reset high-speed USB device number 73 using dummy_hcd [ 1440.893581][ T5843] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1441.085360][ T5843] usb 4-1: Using ep0 maxpacket: 16 [ 1441.134347][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1441.161884][ T5843] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1441.171615][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.195870][ T5843] usb 4-1: Product: syz [ 1441.210120][ T5843] usb 4-1: Manufacturer: syz [ 1441.224081][ T5843] usb 4-1: SerialNumber: syz [ 1441.234178][ T923] usb 5-1: device descriptor read/64, error -71 [ 1441.268615][ T5843] usb 4-1: config 0 descriptor?? [ 1441.328467][ T5843] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1441.361633][ T5843] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 1441.494298][ T923] usb 5-1: reset high-speed USB device number 73 using dummy_hcd [ 1441.541066][ T923] usb 5-1: device reset changed ep0 maxpacket size! [ 1441.588790][ T48] usb 5-1: USB disconnect, device number 73 [ 1441.774202][ T48] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1441.994688][ T5843] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1442.154100][ T48] usb 5-1: Using ep0 maxpacket: 8 [ 1442.169606][ T48] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1442.226723][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.247248][ T48] usb 5-1: Product: syz [ 1442.316387][ T48] usb 5-1: Manufacturer: syz [ 1442.350906][ T48] usb 5-1: SerialNumber: syz [ 1442.386412][ T48] usb 5-1: config 0 descriptor?? [ 1442.675033][ T48] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1442.833510][ T5843] em28xx 4-1:0.0: writing to i2c device at 0xa0 failed (error=-5) [ 1442.867570][ T5843] em28xx 4-1:0.0: failed to read eeprom (err=-5) [ 1442.907729][ T5843] em28xx 4-1:0.0: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 1443.038589][ T5843] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1443.082431][ T5843] em28xx 4-1:0.0: dvb set to bulk mode. [ 1443.091781][ T9983] netlink: 'syz.6.14284': attribute type 1 has an invalid length. [ 1443.105212][T27733] em28xx 4-1:0.0: Binding DVB extension [ 1443.204158][ T5843] usb 4-1: USB disconnect, device number 120 [ 1443.225688][ T9990] netlink: 3 bytes leftover after parsing attributes in process `syz.6.14284'. [ 1443.256497][ T5843] em28xx 4-1:0.0: Disconnecting em28xx [ 1443.288781][T10001] netlink: 3 bytes leftover after parsing attributes in process `syz.6.14284'. [ 1443.290171][T27733] em28xx 4-1:0.0: Registering input extension [ 1443.374444][ T5843] em28xx 4-1:0.0: Closing input extension [ 1443.417822][ T9983] bond0: entered promiscuous mode [ 1443.457163][ T9983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1443.486858][ T5843] em28xx 4-1:0.0: Freeing device [ 1443.616559][ T9990] batadv1: entered promiscuous mode [ 1443.661616][ T9990] batadv1: entered allmulticast mode [ 1443.702630][ T9990] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1443.750041][ T9990] bond0: (slave batadv1): making interface the new active one [ 1443.765477][ T9990] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 1443.903198][T10001] batadv2: entered promiscuous mode [ 1443.940817][T10001] batadv2: entered allmulticast mode [ 1443.981570][T10001] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1444.001796][T10001] bond0: (slave batadv2): Enslaving as an active interface with an up link [ 1444.289061][ T48] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1444.369148][ T48] usb 5-1: USB disconnect, device number 74 [ 1445.615654][ T30] audit: type=1326 audit(1751073221.462:9068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10064 comm="syz.6.14290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb97f8e929 code=0x7ffc0000 [ 1445.644065][T27733] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1445.714793][ T30] audit: type=1326 audit(1751073221.462:9069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10064 comm="syz.6.14290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb97f8e929 code=0x7ffc0000 [ 1445.814326][ T30] audit: type=1326 audit(1751073221.502:9070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10064 comm="syz.6.14290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feb97f2ab19 code=0x7ffc0000 [ 1445.903540][ T30] audit: type=1326 audit(1751073221.502:9071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10064 comm="syz.6.14290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feb97f2ab19 code=0x7ffc0000 [ 1445.961422][T27733] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1446.000206][T27733] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1446.037718][T27733] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1446.046311][ T30] audit: type=1326 audit(1751073221.502:9072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10064 comm="syz.6.14290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feb97f2ab19 code=0x7ffc0000 [ 1446.067407][T27733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1446.152476][ T30] audit: type=1326 audit(1751073221.502:9073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10064 comm="syz.6.14290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feb97f2ab19 code=0x7ffc0000 [ 1446.283732][ T30] audit: type=1326 audit(1751073221.502:9074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10064 comm="syz.6.14290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feb97f2ab19 code=0x7ffc0000 [ 1446.343941][T27733] usb 4-1: SerialNumber: syz [ 1446.423127][ T30] audit: type=1326 audit(1751073221.502:9075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10064 comm="syz.6.14290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feb97f2ab19 code=0x7ffc0000 [ 1446.479822][T10122] netlink: 'syz.1.14298': attribute type 29 has an invalid length. [ 1446.524308][ T30] audit: type=1326 audit(1751073221.502:9076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10064 comm="syz.6.14290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feb97f2ab19 code=0x7ffc0000 [ 1446.566804][T27733] usb 4-1: 0:2 : does not exist [ 1446.571821][T27733] usb 4-1: unit 5: unexpected type 0x0a [ 1446.588425][ T30] audit: type=1326 audit(1751073221.502:9077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10064 comm="syz.6.14290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feb97f2ab19 code=0x7ffc0000 [ 1446.668936][T27733] usb 4-1: USB disconnect, device number 121 [ 1447.368116][T10170] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14301'. [ 1447.774828][ T10] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1447.923982][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1447.950387][ T10] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1447.970063][ T10] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1447.999918][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1448.066888][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1448.088394][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1448.113746][ T10] usb 4-1: Product: syz [ 1448.130999][ T10] usb 4-1: Manufacturer: syz [ 1448.139271][ T10] usb 4-1: SerialNumber: syz [ 1448.959808][ T10] usb 4-1: 0:2 : does not exist [ 1449.006215][ T10] usb 4-1: USB disconnect, device number 122 [ 1449.075459][ T6077] udevd[6077]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1450.004000][ T5843] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1450.186847][T10294] syzkaller0: entered promiscuous mode [ 1450.192382][T10294] syzkaller0: entered allmulticast mode [ 1450.198208][ T5843] usb 4-1: Using ep0 maxpacket: 32 [ 1450.220879][ T5843] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1450.236188][ T5843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1450.267388][ T5843] usb 4-1: config 0 descriptor?? [ 1450.319762][ T5843] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1451.104341][ T5843] gspca_vc032x: reg_w err -110 [ 1451.129920][ T5843] gspca_vc032x: I2c Bus Busy Wait 00 [ 1451.174083][ T5843] gspca_vc032x: I2c Bus Busy Wait 00 [ 1451.179440][ T5843] gspca_vc032x: I2c Bus Busy Wait 00 [ 1451.602619][ T5843] gspca_vc032x: I2c Bus Busy Wait 00 [ 1451.624016][ T5843] gspca_vc032x: I2c Bus Busy Wait 00 [ 1451.629363][ T5843] gspca_vc032x: I2c Bus Busy Wait 00 [ 1451.641926][ T5843] gspca_vc032x: I2c Bus Busy Wait 00 [ 1451.647336][ T5843] gspca_vc032x: I2c Bus Busy Wait 00 [ 1451.653054][ T5843] gspca_vc032x: I2c Bus Busy Wait 00 [ 1451.658432][ T5843] gspca_vc032x: I2c Bus Busy Wait 00 [ 1451.663741][ T5843] gspca_vc032x: I2c Bus Busy Wait 00 [ 1451.669126][ T5843] gspca_vc032x: I2c Bus Busy Wait 00 [ 1451.674937][ T5843] gspca_vc032x: I2c Bus Busy Wait 00 [ 1451.680266][ T5843] gspca_vc032x: I2c Bus Busy Wait 00 [ 1451.685650][ T5843] gspca_vc032x: I2c Bus Busy Wait 00 [ 1451.690969][ T5843] gspca_vc032x: I2c Bus Busy Wait 00 [ 1451.696498][ T5843] gspca_vc032x: I2c Bus Busy Wait 00 [ 1451.701841][ T5843] gspca_vc032x: I2c Bus Busy Wait 00 [ 1451.707567][ T5843] gspca_vc032x: Unknown sensor... [ 1451.712682][ T5843] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 1451.735027][ T5843] usb 4-1: USB disconnect, device number 123 [ 1452.754106][ T10] usb 4-1: new full-speed USB device number 124 using dummy_hcd [ 1452.928932][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1452.951401][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1452.979074][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1453.062874][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1453.399190][ T10] usb 4-1: GET_CAPABILITIES returned 0 [ 1453.408333][ T10] usbtmc 4-1:16.0: can't read capabilities [ 1453.656829][ T48] usb 4-1: USB disconnect, device number 124 [ 1454.293123][T10399] ALSA: mixer_oss: invalid OSS volume '' [ 1454.299823][T10399] ALSA: mixer_oss: invalid OSS volume 'àœƒñâÏ­×¢ƒ÷I;oš˜jdÐx&_®ú_' [ 1454.329692][T10399] ALSA: mixer_oss: invalid OSS volume '¨Õûé' [ 1454.784992][ T10] usb 4-1: new full-speed USB device number 125 using dummy_hcd [ 1454.977942][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1454.990692][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1455.166034][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1455.184187][ T10] usb 4-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 1455.218481][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1455.273019][ T10] usb 4-1: config 0 descriptor?? [ 1455.307941][T10405] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1455.571904][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 1455.578220][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1455.610856][ T10] usb 4-1: USB disconnect, device number 125 [ 1456.327464][T10445] netlink: 2048 bytes leftover after parsing attributes in process `syz.3.14339'. [ 1456.347761][T10445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14339'. [ 1457.741923][T10482] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14344'. [ 1457.816310][T10482] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14344'. [ 1458.034507][ T3124] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1458.207911][ T3124] usb 2-1: Using ep0 maxpacket: 32 [ 1458.252902][ T3124] usb 2-1: config 0 has an invalid interface number: 231 but max is 0 [ 1458.274014][ T3124] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1458.297711][ T3124] usb 2-1: config 0 has no interface number 0 [ 1458.309589][ T3124] usb 2-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1458.364269][ T3124] usb 2-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1458.427062][ T3124] usb 2-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 1458.449917][ T3124] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.564227][ T3124] usb 2-1: Product: syz [ 1458.575444][ T3124] usb 2-1: Manufacturer: syz [ 1458.610970][ T3124] usb 2-1: SerialNumber: syz [ 1458.630856][ T3124] usb 2-1: config 0 descriptor?? [ 1458.694789][T10483] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1458.744088][ T10] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1458.754584][ T3124] usb-storage 2-1:0.231: USB Mass Storage device detected [ 1458.940641][ T10] usb 4-1: config 0 has no interfaces? [ 1458.969945][ T10] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1459.019695][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.089423][ T10] usb 4-1: Product: syz [ 1459.093665][ T10] usb 4-1: Manufacturer: syz [ 1459.117024][ T48] usb 2-1: USB disconnect, device number 120 [ 1459.199582][ T10] usb 4-1: SerialNumber: syz [ 1459.261261][ T10] usb 4-1: config 0 descriptor?? [ 1460.106515][T10569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14354'. [ 1460.451896][T10581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14356'. [ 1460.664191][ T3124] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1460.856171][ T3124] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1460.876252][ T3124] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1460.905363][ T3124] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1460.967083][ T3124] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1461.002130][ T3124] usb 5-1: config 0 descriptor?? [ 1461.455537][ T3124] cp2112 0003:10C4:EA90.00DF: unknown main item tag 0x0 [ 1461.515152][ T3124] cp2112 0003:10C4:EA90.00DF: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1461.650777][ T3124] cp2112 0003:10C4:EA90.00DF: error requesting version [ 1461.668601][T10624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14361'. [ 1461.680618][ T3124] cp2112 0003:10C4:EA90.00DF: probe with driver cp2112 failed with error -71 [ 1461.714781][ T3124] usb 5-1: USB disconnect, device number 75 [ 1461.813967][ T5926] usb 4-1: USB disconnect, device number 126 [ 1462.507453][ T48] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1462.674084][ T48] usb 2-1: Using ep0 maxpacket: 16 [ 1462.689041][ T48] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1462.702317][ T48] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1462.725537][ T48] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1462.744304][ T48] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1462.753998][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.773230][ T48] usb 2-1: Product: syz [ 1462.839225][ T48] usb 2-1: Manufacturer: syz [ 1462.849234][ T48] usb 2-1: SerialNumber: syz [ 1463.607176][ T48] usb 2-1: 0:2 : does not exist [ 1464.165941][T10721] kvm: Disabled LAPIC found during irq injection [ 1464.747113][T10738] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14380'. [ 1464.802910][T10748] netlink: 'syz.4.14381': attribute type 1 has an invalid length. [ 1464.965094][ T5843] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1464.971675][T10748] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1465.060848][ T48] usb 2-1: USB disconnect, device number 121 [ 1465.109063][ T6077] udevd[6077]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1465.126315][ T5843] usb 4-1: Using ep0 maxpacket: 32 [ 1465.141763][T10754] bond4: (slave veth5): Enslaving as an active interface with a down link [ 1465.155780][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1465.177493][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1465.204647][ T5843] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1465.224616][ T5843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.242702][ T5843] usb 4-1: config 0 descriptor?? [ 1465.269835][ T5843] hub 4-1:0.0: USB hub found [ 1465.288113][T10786] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1465.488948][ T5843] hub 4-1:0.0: 1 port detected [ 1466.100622][ T5843] hub 4-1:0.0: activate --> -90 [ 1467.048802][ T48] usb 4-1: USB disconnect, device number 127 [ 1469.145784][ T5942] usb 4-1: [UEAGLE-ATM] firmware is not available [ 1469.358884][T10926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14398'. [ 1470.082341][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1470.213827][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1470.274068][ T5942] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1470.319298][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1470.452169][ T5942] usb 2-1: Using ep0 maxpacket: 32 [ 1470.491403][ T5942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1470.534148][ T5942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8347, setting to 1024 [ 1470.556870][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1470.565009][ T5942] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1470.588319][ T5942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1470.619906][ T5942] usb 2-1: config 0 descriptor?? [ 1471.058483][ T13] bridge_slave_1: left allmulticast mode [ 1471.078693][ T13] bridge_slave_1: left promiscuous mode [ 1471.094116][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1471.152670][ T5942] savu 0003:1E7D:2D5A.00E0: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 1471.169828][ T13] bridge_slave_0: left allmulticast mode [ 1471.204339][ T13] bridge_slave_0: left promiscuous mode [ 1471.237421][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1471.387495][ T5942] usb 2-1: USB disconnect, device number 122 [ 1471.463118][ T2933] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1471.490120][ T2933] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1471.506140][ T2933] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1471.524470][ T2933] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1471.558638][ T2933] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1472.837300][T11050] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14414'. [ 1473.144760][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1473.188055][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1473.201972][ T13] bond0 (unregistering): Released all slaves [ 1473.371632][T11050] bond5: entered promiscuous mode [ 1473.402434][T11050] bond5: entered allmulticast mode [ 1473.455213][T11051] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1473.465807][T11051] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1473.611143][T11051] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1473.631223][T11051] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1473.658250][T11051] geneve3: entered promiscuous mode [ 1473.675846][ T7758] Bluetooth: hci4: command tx timeout [ 1473.710437][T11051] geneve3: entered allmulticast mode [ 1473.724867][T11051] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 1473.774168][T11052] bond5 (unregistering): (slave geneve3): Releasing backup interface [ 1473.821379][T11052] geneve3: left promiscuous mode [ 1473.843810][T11052] geneve3: left allmulticast mode [ 1473.886436][T11052] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1473.912162][T11052] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1473.931353][T11052] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1473.954870][T11052] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1473.995584][T11052] bond5 (unregistering): Released all slaves [ 1474.435465][T11167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14420'. [ 1474.633353][T11188] netlink: 10 bytes leftover after parsing attributes in process `syz.1.14421'. [ 1474.809176][ T13] hsr_slave_0: left promiscuous mode [ 1474.838113][ T13] hsr_slave_1: left promiscuous mode [ 1474.858460][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1474.884672][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1474.907860][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1474.932412][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1475.071242][ T13] veth1_macvtap: left promiscuous mode [ 1475.100260][ T13] veth0_macvtap: left promiscuous mode [ 1475.119263][ T13] veth1_vlan: left promiscuous mode [ 1475.142325][ T13] veth0_vlan: left promiscuous mode [ 1475.670210][T11225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14425'. [ 1475.754389][ T7758] Bluetooth: hci4: command tx timeout [ 1476.113093][T11244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14429'. [ 1476.753969][ T5942] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1476.917911][ T5942] usb 2-1: config index 0 descriptor too short (expected 32786, got 18) [ 1476.927640][ T5942] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 1476.947061][ T5942] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=0 [ 1476.964508][ T5942] usb 2-1: Manufacturer: syz [ 1476.987280][ T5942] usb 2-1: config 0 descriptor?? [ 1476.996686][ T5942] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1477.017125][ T5942] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 1477.028087][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1477.156753][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1477.834442][ T7758] Bluetooth: hci4: command tx timeout [ 1478.483956][ T5942] usb 2-1: USB disconnect, device number 123 [ 1478.499466][ T5942] ftdi_sio 2-1:0.0: device disconnected [ 1479.093781][T11032] chnl_net:caif_netlink_parms(): no params data found [ 1479.326363][T11436] netlink: 'syz.0.14435': attribute type 4 has an invalid length. [ 1479.354132][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1479.917046][ T7758] Bluetooth: hci4: command tx timeout [ 1480.391280][ T3564] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1480.404715][T11453] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14438'. [ 1481.364925][ T3564] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.855845][T11032] bridge0: port 1(bridge_slave_0) entered blocking state [ 1481.867532][T11032] bridge0: port 1(bridge_slave_0) entered disabled state [ 1481.885644][T11032] bridge_slave_0: entered allmulticast mode [ 1481.921225][T11032] bridge_slave_0: entered promiscuous mode [ 1482.221987][ T3564] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.256846][ T48] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1482.347055][T11032] bridge0: port 2(bridge_slave_1) entered blocking state [ 1482.444622][T11032] bridge0: port 2(bridge_slave_1) entered disabled state [ 1482.476145][ T48] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1482.491227][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1482.514428][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1482.530041][ T48] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1482.534559][T11032] bridge_slave_1: entered allmulticast mode [ 1482.543051][ T48] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1482.559347][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1482.570689][ T48] usb 2-1: config 0 descriptor?? [ 1482.627494][T11032] bridge_slave_1: entered promiscuous mode [ 1482.916714][ T3564] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1483.105049][ T48] plantronics 0003:047F:FFFF.00E1: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1483.152901][T11032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1483.397098][T11032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1483.824340][T11612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14454'. [ 1484.010945][ T5926] usb 2-1: USB disconnect, device number 124 [ 1484.061781][T11032] team0: Port device team_slave_0 added [ 1484.112612][T11032] team0: Port device team_slave_1 added [ 1484.412863][T11032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1484.444085][T11032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1484.479187][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.485798][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.555509][T11032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1484.661529][T11684] syzkaller1: entered promiscuous mode [ 1484.699031][T11684] syzkaller1: entered allmulticast mode [ 1484.760508][T11032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1484.786743][T11032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1484.820505][T11032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1485.287486][T11032] hsr_slave_0: entered promiscuous mode [ 1485.301970][T11032] hsr_slave_1: entered promiscuous mode [ 1485.320203][T11032] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1485.331826][T11032] Cannot create hsr debugfs directory [ 1485.352584][ T3564] bridge_slave_1: left allmulticast mode [ 1485.384189][ T3564] bridge_slave_1: left promiscuous mode [ 1485.393070][ T3564] bridge0: port 2(bridge_slave_1) entered disabled state [ 1485.415628][ T3564] bridge_slave_0: left allmulticast mode [ 1485.428870][ T3564] bridge_slave_0: left promiscuous mode [ 1485.435889][ T3564] bridge0: port 1(bridge_slave_0) entered disabled state [ 1486.463687][ T3564] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1486.476651][ T3564] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1486.487184][ T3564] bond0 (unregistering): Released all slaves [ 1487.538987][ T3564] hsr_slave_0: left promiscuous mode [ 1487.575240][ T3564] hsr_slave_1: left promiscuous mode [ 1487.593765][ T3564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1487.635882][ T3564] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1487.661575][ T3564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1487.690139][ T3564] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1487.752657][ T3564] veth1_macvtap: left promiscuous mode [ 1487.772395][ T3564] veth0_macvtap: left promiscuous mode [ 1487.779646][ T3564] veth1_vlan: left promiscuous mode [ 1487.788783][ T3564] veth0_vlan: left promiscuous mode [ 1488.832479][ T3564] team0 (unregistering): Port device team_slave_1 removed [ 1488.891474][ T3564] team0 (unregistering): Port device team_slave_0 removed [ 1489.202931][ T30] kauditd_printk_skb: 238 callbacks suppressed [ 1489.202949][ T30] audit: type=1326 audit(1751073265.042:9316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11882 comm="syz.0.14473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997bf8e929 code=0x7fc00000 [ 1489.274898][ T30] audit: type=1326 audit(1751073265.122:9317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11882 comm="syz.0.14473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997bf8e929 code=0x7fc00000 [ 1489.928294][ T30] audit: type=1326 audit(1751073265.772:9318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11882 comm="syz.0.14473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f997bf2ab19 code=0x7fc00000 [ 1489.973821][ T30] audit: type=1326 audit(1751073265.772:9319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11882 comm="syz.0.14473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f997bf2abdf code=0x7fc00000 [ 1490.000386][ T30] audit: type=1326 audit(1751073265.772:9320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11882 comm="syz.0.14473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f997bf8e929 code=0x7fc00000 [ 1493.332253][T11032] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1493.425951][T11032] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1493.687394][T11032] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1493.817879][T11032] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1494.350104][T11032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1494.455091][T11032] 8021q: adding VLAN 0 to HW filter on device team0 [ 1494.567125][ T3493] bridge0: port 1(bridge_slave_0) entered blocking state [ 1494.574364][ T3493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1494.600643][ T3493] bridge0: port 2(bridge_slave_1) entered blocking state [ 1494.607924][ T3493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1495.201289][T11032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1495.495974][T11032] veth0_vlan: entered promiscuous mode [ 1495.669677][T11032] veth1_vlan: entered promiscuous mode [ 1495.821585][T11032] veth0_macvtap: entered promiscuous mode [ 1495.898690][T11032] veth1_macvtap: entered promiscuous mode [ 1496.002033][T11032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1496.046778][T11032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1496.074549][T11032] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.117348][T11032] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.165689][T11032] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.185367][T11032] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.542880][T29968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1496.570173][T29968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1496.686241][ T3480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1496.724217][ T3480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1497.791751][ T1159] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1497.813628][ T1159] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1497.992092][ T1159] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1498.023165][ T1159] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1498.277631][ T1159] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1498.339702][ T1159] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1498.652435][ T1159] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1498.713177][ T1159] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1499.078901][T12180] cgroup: fork rejected by pids controller in /syz1 [ 1499.485494][ T2933] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1499.496793][ T2933] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1499.520444][ T2933] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1499.552672][ T2933] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1499.570950][ T2933] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1500.284716][ T1159] bond2 (unregistering): (slave ip6gre1): Releasing backup interface [ 1500.333976][ T1159] ip6gre1 (unregistering): left promiscuous mode [ 1501.674096][ T7758] Bluetooth: hci1: command tx timeout [ 1503.461161][ T1159] tipc: Disabling bearer [ 1503.754680][ T7758] Bluetooth: hci1: command tx timeout [ 1503.988772][T12349] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1503.996188][T12349] IPv6: NLM_F_CREATE should be set when creating new route [ 1504.210276][ T1159] bond0 (unregistering): left promiscuous mode [ 1504.217199][ T1159] bond0 (unregistering): Released all slaves [ 1504.372650][ T1159] bond1 (unregistering): Released all slaves [ 1504.522467][ T1159] bond2 (unregistering): Released all slaves [ 1504.685048][ T1159] bond3 (unregistering): Released all slaves [ 1504.839775][ T1159] bond4 (unregistering): (slave veth5): Releasing active interface [ 1504.850492][ T1159] bond4 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1504.861374][ T1159] bond4 (unregistering): Released all slaves [ 1504.931682][T12349] lo: entered allmulticast mode [ 1504.975449][T12349] tunl0: entered allmulticast mode [ 1505.009973][T12349] gre0: entered allmulticast mode [ 1505.070819][T12349] gretap0: entered allmulticast mode [ 1505.138171][T12349] erspan0: entered allmulticast mode [ 1505.191396][T12349] ip_vti0: entered allmulticast mode [ 1505.208623][T12349] ip6_vti0: entered allmulticast mode [ 1505.218428][T12349] sit0: entered allmulticast mode [ 1505.232786][T12349] ip6tnl0: entered allmulticast mode [ 1505.268652][T12349] ip6gre0: entered allmulticast mode [ 1505.410674][T12349] syz_tun: entered allmulticast mode [ 1506.141262][ T7758] Bluetooth: hci3: command 0x0406 tx timeout [ 1506.167480][ T7758] Bluetooth: hci1: command tx timeout [ 1506.207960][T12349] ip6gretap0: entered allmulticast mode [ 1506.275083][T12349] bridge0: entered allmulticast mode [ 1506.288280][T12349] bond0: entered allmulticast mode [ 1506.335174][T12349] team0: entered allmulticast mode [ 1506.359041][T12349] dummy0: entered allmulticast mode [ 1506.400120][T12349] nlmon0: entered allmulticast mode [ 1506.415518][T12349] caif0: entered allmulticast mode [ 1506.424760][T12349] batadv0: entered allmulticast mode [ 1506.496507][T12349] vxcan0: entered allmulticast mode [ 1506.549861][T12349] vxcan1: entered allmulticast mode [ 1506.559047][T12349] veth0: entered allmulticast mode [ 1506.650688][T12349] veth1: entered allmulticast mode [ 1506.701673][T12349] wg0: entered allmulticast mode [ 1506.770234][T12349] wg1: entered allmulticast mode [ 1506.792253][T12349] wg2: entered allmulticast mode [ 1506.817498][T12349] veth0_to_bridge: entered allmulticast mode [ 1506.833311][T12349] bridge_slave_0: entered allmulticast mode [ 1506.860789][T12349] veth1_to_bridge: entered allmulticast mode [ 1506.893298][T12349] bridge_slave_1: entered allmulticast mode [ 1506.922536][T12349] veth0_to_bond: entered allmulticast mode [ 1506.935207][T12349] bond_slave_0: entered allmulticast mode [ 1506.950287][T12349] veth1_to_bond: entered allmulticast mode [ 1506.962720][T12349] bond_slave_1: entered allmulticast mode [ 1506.976693][T12349] veth1_to_team: entered allmulticast mode [ 1506.992344][T12349] team_slave_1: entered allmulticast mode [ 1507.001347][T12349] veth0_to_batadv: entered allmulticast mode [ 1507.027968][T12349] batadv_slave_0: entered allmulticast mode [ 1507.042387][T12349] veth1_to_batadv: entered allmulticast mode [ 1507.069744][T12349] batadv_slave_1: entered allmulticast mode [ 1507.081193][T12349] xfrm0: entered allmulticast mode [ 1507.109112][T12349] veth0_to_hsr: entered allmulticast mode [ 1507.140686][T12349] hsr_slave_0: entered allmulticast mode [ 1507.151756][T12349] veth1_to_hsr: entered allmulticast mode [ 1507.170151][T12349] hsr_slave_1: entered allmulticast mode [ 1507.187953][T12349] hsr0: entered allmulticast mode [ 1507.207837][T12349] veth1_virt_wifi: entered allmulticast mode [ 1507.228839][T12349] veth0_virt_wifi: entered allmulticast mode [ 1507.243060][T12349] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1507.262176][T12349] veth1_vlan: entered allmulticast mode [ 1507.278553][T12349] veth0_vlan: entered allmulticast mode [ 1507.318240][T12349] vlan0: entered allmulticast mode [ 1507.323607][T12349] vlan1: entered allmulticast mode [ 1507.339373][T12349] macvlan0: entered allmulticast mode [ 1507.358131][T12349] macvlan1: entered allmulticast mode [ 1507.370350][T12349] ipvlan0: entered allmulticast mode [ 1507.379508][T12349] ipvlan1: entered allmulticast mode [ 1507.388165][T12349] veth1_macvtap: entered allmulticast mode [ 1507.406333][T12349] veth0_macvtap: entered allmulticast mode [ 1507.422087][T12349] macvtap0: entered allmulticast mode [ 1507.441556][T12349] macsec0: entered allmulticast mode [ 1507.462260][T12349] geneve0: entered allmulticast mode [ 1507.477689][T12349] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1507.494153][T12349] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1507.504724][T12349] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1507.513742][T12349] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1507.524860][T12349] geneve1: entered allmulticast mode [ 1507.541726][T12349] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1507.554213][T12349] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 1507.571567][T12349] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 1507.584292][T12349] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 1507.606847][T12349] mac80211_hwsim hwsim41 wlan0: entered allmulticast mode [ 1507.629782][T12349] mac80211_hwsim hwsim42 wlan1: entered allmulticast mode [ 1507.643786][T12349] mac80211_hwsim hwsim45 wlan2: entered allmulticast mode [ 1507.652272][T12349] gre1: entered allmulticast mode [ 1507.659719][T12349] veth2: entered allmulticast mode [ 1507.666402][T12349] veth3: entered allmulticast mode [ 1507.677065][T12349] gre2: entered allmulticast mode [ 1507.685839][T12349] gre3: entered allmulticast mode [ 1507.735350][ T1159] : left promiscuous mode [ 1507.939885][ T1159] tipc: Left network mode [ 1508.234077][ T2933] Bluetooth: hci1: command tx timeout [ 1509.048024][ T1159] mac80211_hwsim hwsim16 wlan1 (unregistering): left promiscuous mode [ 1509.477938][T12268] chnl_net:caif_netlink_parms(): no params data found [ 1510.138236][T12609] netlink: 'syz.7.14552': attribute type 4 has an invalid length. [ 1510.172968][T12268] bridge0: port 1(bridge_slave_0) entered blocking state [ 1510.181467][T12268] bridge0: port 1(bridge_slave_0) entered disabled state [ 1510.189548][T12268] bridge_slave_0: entered allmulticast mode [ 1510.199586][T12268] bridge_slave_0: entered promiscuous mode [ 1510.237909][T12593] netlink: 'syz.7.14552': attribute type 4 has an invalid length. [ 1510.273107][T12268] bridge0: port 2(bridge_slave_1) entered blocking state [ 1510.283269][T12268] bridge0: port 2(bridge_slave_1) entered disabled state [ 1510.305970][T12268] bridge_slave_1: entered allmulticast mode [ 1510.317370][T12268] bridge_slave_1: entered promiscuous mode [ 1510.515989][T12268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1510.556546][ T1159] batman_adv: batadv0: Interface deactivated: macvtap1 [ 1510.566353][ T1159] mac80211_hwsim hwsim10 wlan0 (unregistering): left allmulticast mode [ 1510.646686][ T1159] batman_adv: batadv0: Removing interface: macvtap1 [ 1510.719615][T12268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1510.832684][ T1159] hsr_slave_0: left promiscuous mode [ 1510.843025][ T1159] hsr_slave_1: left promiscuous mode [ 1514.152224][T12268] team0: Port device team_slave_0 added [ 1514.190404][T12268] team0: Port device team_slave_1 added [ 1514.265855][T12752] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14565'. [ 1514.510597][T12268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1514.539820][T12268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1514.567132][T12268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1514.582587][T12797] netlink: 44 bytes leftover after parsing attributes in process `syz.7.14568'. [ 1514.592728][T12268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1514.652597][T12268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1515.169211][T12268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1515.723727][T12268] hsr_slave_0: entered promiscuous mode [ 1515.785114][T12268] hsr_slave_1: entered promiscuous mode [ 1515.818248][T12864] binder: 12861:12864 ioctl c0306201 2000000003c0 returned -14 [ 1516.031490][ T1159] IPVS: stop unused estimator thread 0... [ 1517.374364][ T5843] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1517.544858][ T5843] usb 2-1: Using ep0 maxpacket: 32 [ 1517.626070][ T5843] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1517.654840][ T5843] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1517.678572][ T5843] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1517.710679][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1517.771505][ T5843] usb 2-1: config 0 descriptor?? [ 1517.807259][ T5843] hub 2-1:0.0: USB hub found [ 1518.000543][ T5843] hub 2-1:0.0: 1 port detected [ 1518.619109][ T5843] hub 2-1:0.0: activate --> -90 [ 1518.832367][ T5843] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 1518.851663][ T48] usb 2-1: USB disconnect, device number 125 [ 1518.909144][T12268] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1518.978486][T12268] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1519.013290][T12268] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1519.061758][T12268] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1519.512399][T12268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1519.638813][T12268] 8021q: adding VLAN 0 to HW filter on device team0 [ 1519.682222][ T3493] bridge0: port 1(bridge_slave_0) entered blocking state [ 1519.689424][ T3493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1519.736758][T29968] bridge0: port 2(bridge_slave_1) entered blocking state [ 1519.744022][T29968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1520.140196][T12268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1520.607161][T12268] veth0_vlan: entered promiscuous mode [ 1520.739851][T12268] veth1_vlan: entered promiscuous mode [ 1520.823792][T12268] veth0_macvtap: entered promiscuous mode [ 1520.867800][T12268] veth1_macvtap: entered promiscuous mode [ 1520.960353][T12268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1521.034150][T12268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1521.160703][T12268] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1521.380253][T12268] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1521.394235][T12268] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1521.460354][T12268] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1522.434492][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1522.442396][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1522.541652][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1522.558370][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1522.977401][T13134] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1522.983987][T13134] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1523.044443][T13134] vhci_hcd vhci_hcd.0: Device attached [ 1523.087611][T13137] vhci_hcd: connection closed [ 1523.090442][ T12] vhci_hcd: stop threads [ 1523.122251][ T12] vhci_hcd: release socket [ 1523.159919][ T12] vhci_hcd: disconnect device [ 1523.963960][ T5927] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1524.173939][ T5927] usb 2-1: Using ep0 maxpacket: 32 [ 1524.187020][ T5927] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1524.219417][ T5927] usb 2-1: config 0 has no interface number 0 [ 1524.278946][ T5927] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1524.298476][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1524.318821][ T5927] usb 2-1: Product: syz [ 1524.331186][ T5927] usb 2-1: Manufacturer: syz [ 1524.340335][ T5927] usb 2-1: SerialNumber: syz [ 1524.364107][ T5927] usb 2-1: config 0 descriptor?? [ 1524.391517][ T5927] smsc95xx v2.0.0 [ 1525.276795][ T5927] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1525.364867][ T5927] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1526.171257][T13211] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1526.218193][T13211] kvm: requested 41066 ns i8254 timer period limited to 200000 ns [ 1526.261678][T13211] kvm: requested 150019 ns i8254 timer period limited to 200000 ns [ 1526.484746][ T5927] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1526.510429][ T5927] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 1526.549448][ T5927] usb 2-1: USB disconnect, device number 126 [ 1526.822063][T13232] syz_tun: entered allmulticast mode [ 1526.887616][T13228] syz_tun: left allmulticast mode [ 1528.600681][ T3124] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1528.867883][ T3124] usb 6-1: Using ep0 maxpacket: 32 [ 1528.889910][ T3124] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1528.916195][ T3124] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1528.933933][ T3124] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1529.083610][ T3124] usb 6-1: Product: syz [ 1529.088469][ T3124] usb 6-1: Manufacturer: syz [ 1529.093297][ T3124] usb 6-1: SerialNumber: syz [ 1529.112647][ T3124] usb 6-1: config 0 descriptor?? [ 1529.127111][T13264] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1529.413441][ T3124] usb 6-1: USB disconnect, device number 55 [ 1532.956080][T13423] binder: BINDER_SET_CONTEXT_MGR already set [ 1532.984522][T13423] binder: 13422:13423 ioctl 4018620d 2000000001c0 returned -16 [ 1534.085959][T13445] netlink: 28 bytes leftover after parsing attributes in process `syz.7.14643'. [ 1534.149907][T13445] netlink: 28 bytes leftover after parsing attributes in process `syz.7.14643'. [ 1535.913759][T13514] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14655'. [ 1536.544905][ T48] usb 2-1: new full-speed USB device number 127 using dummy_hcd [ 1536.553317][T13530] netlink: 'syz.0.14657': attribute type 10 has an invalid length. [ 1536.610033][T13530] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1536.649615][T13529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1536.716197][ T48] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1536.750796][ T48] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1536.810977][ T48] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1536.823994][ T48] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1536.832061][ T48] usb 2-1: Manufacturer: syz [ 1536.867768][ T48] usb 2-1: config 0 descriptor?? [ 1537.111278][T27733] usb 2-1: USB disconnect, device number 127 [ 1538.707557][T13610] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14668'. [ 1540.333979][ T3124] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1540.564137][ T3124] usb 2-1: Using ep0 maxpacket: 32 [ 1540.589585][ T3124] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1540.721311][ T3124] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1540.804045][ T3124] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1540.874501][ T3124] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1540.959723][ T3124] usb 2-1: config 0 descriptor?? [ 1540.992154][ T3124] hub 2-1:0.0: USB hub found [ 1541.222675][ T3124] hub 2-1:0.0: 1 port detected [ 1542.042368][ T3124] hub 2-1:0.0: activate --> -90 [ 1542.244919][T27733] usb 2-1: USB disconnect, device number 2 [ 1542.245431][ T3124] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 1543.366730][T13722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1543.397662][T13722] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1543.450943][T13722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1543.507687][T13722] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1544.488981][T13779] ip6tnl1: entered promiscuous mode [ 1545.925110][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.931864][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1549.481247][ T30] audit: type=1326 audit(1751073325.322:9321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13874 comm="syz.0.14712" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f997bf8e929 code=0x0 [ 1550.167454][T13901] netlink: 'syz.0.14716': attribute type 4 has an invalid length. [ 1550.222724][T13901] netlink: 'syz.0.14716': attribute type 4 has an invalid length. [ 1550.635504][T13920] sch_tbf: burst 1885 is lower than device lo mtu (11337746) ! [ 1551.117156][T13927] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14721'. [ 1552.915208][T13988] netlink: 156 bytes leftover after parsing attributes in process `syz.0.14732'. [ 1554.583962][ T30] audit: type=1326 audit(1751073330.422:9322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14003 comm="syz.1.14736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0b8292ab19 code=0x7ffc0000 [ 1554.723949][ T30] audit: type=1326 audit(1751073330.462:9323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14003 comm="syz.1.14736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0b8292ab19 code=0x7ffc0000 [ 1554.873253][ T30] audit: type=1326 audit(1751073330.462:9324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14003 comm="syz.1.14736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b8298e929 code=0x7ffc0000 [ 1555.090390][ T30] audit: type=1326 audit(1751073330.462:9325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14003 comm="syz.1.14736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b8298e929 code=0x7ffc0000 [ 1555.295887][ T30] audit: type=1326 audit(1751073330.462:9326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14003 comm="syz.1.14736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0b8292ab19 code=0x7ffc0000 [ 1555.495426][ T30] audit: type=1326 audit(1751073330.462:9327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14003 comm="syz.1.14736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b8298e929 code=0x7ffc0000 [ 1555.635311][ T30] audit: type=1326 audit(1751073330.462:9328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14003 comm="syz.1.14736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0b8292ab19 code=0x7ffc0000 [ 1555.704961][T14047] netlink: zone id is out of range [ 1555.710111][T14047] netlink: zone id is out of range [ 1555.772275][T14047] netlink: zone id is out of range [ 1555.778966][T14047] netlink: zone id is out of range [ 1555.785626][T14047] netlink: zone id is out of range [ 1555.791903][T14047] netlink: zone id is out of range [ 1555.799410][T14047] netlink: zone id is out of range [ 1555.805048][T14047] netlink: zone id is out of range [ 1555.811785][T14047] netlink: zone id is out of range [ 1555.818563][T14047] netlink: zone id is out of range [ 1555.843963][ T30] audit: type=1326 audit(1751073330.462:9329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14003 comm="syz.1.14736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b8298e929 code=0x7ffc0000 [ 1556.015504][ T30] audit: type=1326 audit(1751073330.462:9330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14003 comm="syz.1.14736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b8298e929 code=0x7ffc0000 [ 1556.159569][ T30] audit: type=1326 audit(1751073330.462:9331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14003 comm="syz.1.14736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b8298e929 code=0x7ffc0000 [ 1556.843939][T27733] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1557.041461][T27733] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1557.082567][T27733] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1557.192567][T27733] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1557.240692][T27733] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1557.301352][T27733] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1557.336929][T27733] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1557.363405][T27733] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1557.378748][T27733] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1557.395994][T27733] usb 6-1: Product: syz [ 1557.400755][T27733] usb 6-1: Manufacturer: syz [ 1557.423221][T14093] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1557.440113][T27733] cdc_wdm 6-1:1.0: skipping garbage [ 1557.445606][T27733] cdc_wdm 6-1:1.0: skipping garbage [ 1557.455361][T27733] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1557.461545][T27733] cdc_wdm 6-1:1.0: Unknown control protocol [ 1558.078944][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1558.085756][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1558.092143][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1558.098789][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1558.105154][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1558.111798][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1558.118670][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1558.125306][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1558.131797][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1558.138430][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1558.145383][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1558.152025][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1558.158358][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1558.164986][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1558.171467][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1558.178107][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1558.185692][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 1558.244809][ T5927] usb 6-1: USB disconnect, device number 56 [ 1560.672798][T14280] netlink: 44 bytes leftover after parsing attributes in process `syz.1.14768'. [ 1560.727645][T14280] bridge0: left allmulticast mode [ 1565.111774][T14383] input: syz1 as /devices/virtual/input/input166 [ 1565.136869][T14382] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14785'. [ 1565.224415][T14382] netlink: 18 bytes leftover after parsing attributes in process `syz.1.14785'. [ 1565.323117][T14390] binder: BINDER_SET_CONTEXT_MGR already set [ 1565.338267][T14390] binder: 14389:14390 ioctl 4018620d 2000000000c0 returned -16 [ 1565.394334][T14390] binder: BINDER_SET_CONTEXT_MGR already set [ 1565.408410][T14390] binder: 14389:14390 ioctl 4018620d 200000000040 returned -16 [ 1565.425894][T14390] binder: 14389:14390 ioctl c0306201 2000000003c0 returned -14 [ 1566.491923][ T30] kauditd_printk_skb: 154 callbacks suppressed [ 1566.491945][ T30] audit: type=1800 audit(1751073342.302:9486): pid=14414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.14789" name="/" dev="fuse" ino=0 res=0 errno=0 [ 1570.530561][ T30] audit: type=1326 audit(1751073346.372:9487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14501 comm="syz.5.14806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9294f8e929 code=0x7ffc0000 [ 1570.653995][ T30] audit: type=1326 audit(1751073346.372:9488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14501 comm="syz.5.14806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9294f8e929 code=0x7ffc0000 [ 1570.819046][ T30] audit: type=1326 audit(1751073346.402:9489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14501 comm="syz.5.14806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9294f8e929 code=0x7ffc0000 [ 1570.977144][ T30] audit: type=1326 audit(1751073346.402:9490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14501 comm="syz.5.14806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9294f8e929 code=0x7ffc0000 [ 1571.067740][ T30] audit: type=1326 audit(1751073346.402:9491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14501 comm="syz.5.14806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9294f8e929 code=0x7ffc0000 [ 1571.561970][ T30] audit: type=1326 audit(1751073346.432:9492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14501 comm="syz.5.14806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9294f8e929 code=0x7ffc0000 [ 1571.620222][ T30] audit: type=1326 audit(1751073346.432:9493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14501 comm="syz.5.14806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9294f8e929 code=0x7ffc0000 [ 1571.701091][ T30] audit: type=1326 audit(1751073346.432:9494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14501 comm="syz.5.14806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9294f8e929 code=0x7ffc0000 [ 1571.924975][ T30] audit: type=1326 audit(1751073346.432:9495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14501 comm="syz.5.14806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f9294f8e929 code=0x7ffc0000 [ 1572.082159][ T30] audit: type=1326 audit(1751073346.432:9496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14501 comm="syz.5.14806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9294f8e929 code=0x7ffc0000 [ 1572.209287][ T30] audit: type=1326 audit(1751073346.432:9497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14501 comm="syz.5.14806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9294f8e929 code=0x7ffc0000 [ 1572.232978][ T30] audit: type=1326 audit(1751073346.432:9498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14501 comm="syz.5.14806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f9294f8e929 code=0x7ffc0000 [ 1572.263120][ T30] audit: type=1326 audit(1751073346.432:9499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14501 comm="syz.5.14806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9294f8e929 code=0x7ffc0000 [ 1572.817726][ T30] audit: type=1326 audit(1751073346.432:9500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14501 comm="syz.5.14806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9294f8e929 code=0x7ffc0000 [ 1572.971160][ T30] audit: type=1326 audit(1751073346.432:9501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14501 comm="syz.5.14806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f9294f8e929 code=0x7ffc0000 [ 1573.374781][T14546] loop6: detected capacity change from 0 to 7 [ 1573.434668][T14546] loop6: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 [ 1573.441527][T14546] loop6: p1 size 524288 extends beyond EOD, truncated [ 1573.508657][T14546] loop6: p2 start 923271168 is beyond EOD, truncated [ 1573.527821][T14546] loop6: p3 start 524288 is beyond EOD, truncated [ 1573.556706][T14546] loop6: p4 start 2602905181 is beyond EOD, truncated [ 1573.574110][T14546] loop6: p5 start 1745589262 is beyond EOD, truncated [ 1573.612222][T14546] loop6: p6 start 325178268 is beyond EOD, truncated [ 1573.643984][T14546] loop6: p7 start 2326339850 is beyond EOD, truncated [ 1573.728449][T14546] loop6: p8 start 2562259694 is beyond EOD, truncated [ 1573.908964][ T6077] udevd[6077]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 1575.800347][T14604] random: crng reseeded on system resumption [ 1576.213903][ T5835] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1576.380355][ T5835] usb 2-1: Using ep0 maxpacket: 8 [ 1576.420993][ T5835] usb 2-1: config 0 has an invalid interface number: 175 but max is 0 [ 1576.483888][ T5835] usb 2-1: config 0 has no interface number 0 [ 1576.534047][ T5835] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=bc.ed [ 1576.543156][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1576.623204][ T5835] usb 2-1: Product: syz [ 1576.653857][ T5835] usb 2-1: Manufacturer: syz [ 1576.683636][ T5835] usb 2-1: SerialNumber: syz [ 1576.753332][ T5835] usb 2-1: config 0 descriptor?? [ 1577.899893][ T5835] usbserial_generic 2-1:0.175: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 1577.951983][ T5835] usbserial_generic 2-1:0.175: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 1577.970387][T14678] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 1578.006819][ T5835] usbserial_generic 2-1:0.175: device has no bulk endpoints [ 1578.034798][ T5835] safe_serial 2-1:0.175: safe_serial converter detected [ 1578.050434][ T5835] safe_serial 2-1:0.175: probe with driver safe_serial failed with error -22 [ 1578.071381][ T5835] usb 2-1: USB disconnect, device number 3 [ 1578.184222][T27733] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1578.386670][T27733] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1578.438852][T27733] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1578.469326][T27733] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1578.519945][T27733] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1578.556910][T14677] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1578.614452][T27733] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1578.800043][T27733] usb 6-1: USB disconnect, device number 57 [ 1581.239271][T14749] syz.1.14839 (14749): drop_caches: 2 [ 1587.400487][ T3124] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1587.644576][ T3124] usb 2-1: Using ep0 maxpacket: 32 [ 1587.661179][ T3124] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1587.681891][ T3124] usb 2-1: config 0 has no interface number 0 [ 1587.747165][ T3124] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1587.756516][ T3124] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.783980][ T3124] usb 2-1: Product: syz [ 1587.788181][ T3124] usb 2-1: Manufacturer: syz [ 1587.840262][ T3124] usb 2-1: SerialNumber: syz [ 1587.880614][ T3124] usb 2-1: config 0 descriptor?? [ 1587.917871][ T3124] smsc95xx v2.0.0 [ 1588.380098][ T3124] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1588.411603][ T3124] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1590.304627][ T3124] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000038: -71 [ 1590.357603][ T3124] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 1590.472303][ T3124] usb 2-1: USB disconnect, device number 4 [ 1591.475356][T14945] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14870'. [ 1594.126176][T12380] Bluetooth: hci4: command 0x0406 tx timeout [ 1594.227253][T15006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1594.491160][T15006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1594.809886][T15002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1595.968580][T15039] binder: 15038:15039 ioctl c0306201 2000000003c0 returned -14 [ 1597.451444][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f000000: rx timeout, send abort [ 1597.959776][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f000000: abort rx timeout. Force session deactivation [ 1599.062978][T15135] binder: BINDER_SET_CONTEXT_MGR already set [ 1599.072885][T15135] binder: 15131:15135 ioctl 4018620d 2000000000c0 returned -16 [ 1599.355135][T15135] binder: BINDER_SET_CONTEXT_MGR already set [ 1599.361450][T15135] binder: 15131:15135 ioctl 4018620d 200000000040 returned -16 [ 1599.733934][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1599.733955][ T30] audit: type=1800 audit(1751073375.572:9513): pid=15133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.14902" name="/" dev="fuse" ino=0 res=0 errno=0 [ 1600.069492][ T30] audit: type=1326 audit(1751073375.912:9514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15144 comm="syz.7.14906" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f10ef18e929 code=0x0 [ 1601.918038][T15212] kvm: pic: non byte read [ 1602.448698][T15242] netlink: 'syz.5.14922': attribute type 1 has an invalid length. [ 1602.597572][T15242] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1602.629241][T15250] bond1: (slave ip6erspan0): making interface the new active one [ 1602.639107][T15250] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1605.044517][T15326] syz.1.14930 (15326): drop_caches: 2 [ 1606.486983][T15382] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14938'. [ 1607.359248][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.368010][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.202567][T15445] bridge_slave_0: left allmulticast mode [ 1608.230094][T15445] bridge_slave_0: left promiscuous mode [ 1608.293579][T15445] bridge0: port 1(bridge_slave_0) entered disabled state [ 1608.420555][T15445] bridge_slave_1: left allmulticast mode [ 1608.434893][T15458] netlink: 'syz.6.14950': attribute type 10 has an invalid length. [ 1608.458098][T15445] bridge_slave_1: left promiscuous mode [ 1608.486471][T15461] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14950'. [ 1608.501275][T15445] bridge0: port 2(bridge_slave_1) entered disabled state [ 1608.688138][T15445] bond0: (slave bond_slave_0): Releasing backup interface [ 1608.699786][T15445] bond0: (slave bond_slave_1): Releasing backup interface [ 1608.723662][T15445] team0: Port device team_slave_0 removed [ 1608.737816][T15445] team0: Port device team_slave_1 removed [ 1608.774227][T15445] bond0: (slave wlan1): Releasing backup interface [ 1611.238330][T15516] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1611.826102][T15539] xt_TCPMSS: Only works on TCP SYN packets [ 1614.115456][T15571] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14970'. [ 1614.906433][T15601] netlink: 'syz.1.14974': attribute type 1 has an invalid length. [ 1615.105554][T15613] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14974'. [ 1615.207982][T15601] bond1: entered promiscuous mode [ 1615.253632][T15601] bond1: entered allmulticast mode [ 1615.414808][T15603] geneve2: entered allmulticast mode [ 1615.421940][T15603] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1615.488745][T15603] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1615.534171][T15603] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1615.560411][T15603] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1615.646373][T15603] bond1: (slave geneve2): making interface the new active one [ 1615.672205][T15603] geneve2: entered promiscuous mode [ 1615.706609][T15603] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1615.782313][T15613] bond1: left promiscuous mode [ 1615.816413][T15613] geneve2: left promiscuous mode [ 1615.846957][T15613] bond1: left allmulticast mode [ 1615.883380][T15613] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1617.681335][T15733] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1617.716936][ T30] audit: type=1326 audit(1751073393.542:9515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15735 comm="syz.7.14988" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f10ef18e929 code=0x0 [ 1618.127174][T15763] loop2: detected capacity change from 0 to 7 [ 1618.174129][T15763] loop2: [ 1618.177253][T15763] loop2: partition table partially beyond EOD, truncated [ 1619.174328][ T5843] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1619.370436][ T5843] usb 6-1: Using ep0 maxpacket: 8 [ 1619.380623][ T5843] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1619.441937][ T5843] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1619.489299][ T5843] usb 6-1: Product: syz [ 1619.493569][ T5843] usb 6-1: Manufacturer: syz [ 1619.513977][ T5843] usb 6-1: SerialNumber: syz [ 1619.529244][ T5843] usb 6-1: config 0 descriptor?? [ 1619.772990][ T5843] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1620.496655][ T3124] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1620.654402][ T3124] usb 2-1: Using ep0 maxpacket: 32 [ 1620.665375][ T3124] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1620.678034][ T3124] usb 2-1: config 0 has no interface number 0 [ 1620.730273][ T3124] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1620.763716][ T3124] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1620.784603][ T3124] usb 2-1: Product: syz [ 1620.792798][ T3124] usb 2-1: Manufacturer: syz [ 1620.804246][ T3124] usb 2-1: SerialNumber: syz [ 1620.947804][ T3124] usb 2-1: config 0 descriptor?? [ 1621.030565][ T3124] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1621.912614][ T5843] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1621.990903][ T5843] usb 6-1: USB disconnect, device number 58 [ 1622.341022][ T3124] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1622.383599][ T3124] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1623.128002][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1623.128554][ T5843] usb 2-1: USB disconnect, device number 5 [ 1623.204071][ T5942] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1623.234719][ T5843] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1623.288635][ T5843] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1623.346805][ T5843] quatech2 2-1:0.51: device disconnected [ 1623.408553][ T5942] usb 6-1: config index 0 descriptor too short (expected 3133, got 61) [ 1623.447960][ T5942] usb 6-1: config 0 has an invalid interface number: 156 but max is 1 [ 1623.474116][ T5942] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1623.493895][ T5942] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1623.533337][ T5942] usb 6-1: config 0 has no interface number 0 [ 1623.570323][ T5942] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1623.586266][ T5942] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1623.607274][ T5942] usb 6-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1623.660570][ T5942] usb 6-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1623.689891][ T5942] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1623.725776][ T5942] usb 6-1: config 0 descriptor?? [ 1623.757142][ T5942] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1624.275543][ T5942] spca561 6-1:0.156: probe with driver spca561 failed with error -22 [ 1624.303054][ T5942] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1624.341583][ T5942] usb 6-1: MIDIStreaming interface descriptor not found [ 1624.463905][T27733] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1624.654178][T27733] usb 2-1: Using ep0 maxpacket: 32 [ 1624.668606][T27733] usb 2-1: config 64 has an invalid interface number: 162 but max is 0 [ 1624.684551][T27733] usb 2-1: config 64 has no interface number 0 [ 1624.693756][T27733] usb 2-1: New USB device found, idVendor=0413, idProduct=6a05, bcdDevice=58.fc [ 1624.713338][T27733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1624.738853][T27733] usb 2-1: Product: syz [ 1624.743095][T27733] usb 2-1: Manufacturer: syz [ 1624.766881][T27733] usb 2-1: SerialNumber: syz [ 1624.812389][ T2933] Bluetooth: hci1: command 0x0406 tx timeout [ 1624.862128][ T5926] usb 6-1: USB disconnect, device number 59 [ 1625.003189][T27733] usb 2-1: USB disconnect, device number 6 [ 1628.770527][T16143] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=778909908 (6231279264 ns) > initial count (2900669840 ns). Using initial count to start timer. [ 1628.835783][ T48] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1629.014118][ T48] usb 6-1: Using ep0 maxpacket: 8 [ 1629.030565][ T48] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1629.048906][ T48] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.096687][ T48] usb 6-1: config 0 descriptor?? [ 1631.350472][ T48] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1631.403094][ T48] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 1631.466087][ T48] asix 6-1:0.0: probe with driver asix failed with error -71 [ 1631.543581][ T48] usb 6-1: USB disconnect, device number 60 [ 1632.544181][T16234] binder: BINDER_SET_CONTEXT_MGR already set [ 1632.550247][T16234] binder: 16229:16234 ioctl 4018620d 2000000000c0 returned -16 [ 1632.575105][T16234] binder: BINDER_SET_CONTEXT_MGR already set [ 1632.591548][T16234] binder: 16229:16234 ioctl 4018620d 200000000040 returned -16 [ 1632.733421][T16234] binder: 16229:16234 ioctl c0306201 2000000003c0 returned -14 [ 1632.745988][T16234] binder: 16229:16234 ioctl c0306201 200000000540 returned -11 [ 1633.394630][T18918] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1633.845604][T18918] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1634.058442][T18918] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1634.282576][T18918] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1635.957017][T16283] netlink: 140 bytes leftover after parsing attributes in process `syz.6.15042'. [ 1636.015771][T16283] netlink: 140 bytes leftover after parsing attributes in process `syz.6.15042'. [ 1636.945573][ T2933] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1636.957934][ T2933] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1636.966166][ T2933] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1637.001460][ T2933] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1637.018600][ T2933] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1638.143240][T18918] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1638.598977][T16351] loop2: detected capacity change from 0 to 7 [ 1638.615583][T16351] Dev loop2: unable to read RDB block 7 [ 1638.621251][T16351] loop2: unable to read partition table [ 1638.654627][T16351] loop2: partition table beyond EOD, truncated [ 1638.674783][T16351] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1639.139300][ T2933] Bluetooth: hci3: command tx timeout [ 1639.565986][T18918] team0: Port device bond0 removed [ 1639.599148][T18918] bond0 (unregistering): Released all slaves [ 1640.878935][T18918] bond1 (unregistering): Released all slaves [ 1641.204122][ T2933] Bluetooth: hci3: command tx timeout [ 1641.381019][T16417] gtp0: entered promiscuous mode [ 1641.897830][T16463] binder: 16453:16463 ioctl c0306201 2000000003c0 returned -14 [ 1642.659412][T16320] chnl_net:caif_netlink_parms(): no params data found [ 1642.688937][T16551] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1642.752238][T18918] hsr_slave_0: left promiscuous mode [ 1642.793497][T18918] hsr_slave_1: left promiscuous mode [ 1643.284737][ T2933] Bluetooth: hci3: command tx timeout [ 1645.353961][ T2933] Bluetooth: hci3: command tx timeout [ 1645.617112][T16592] kvm: user requested TSC rate below hardware speed [ 1647.034047][T27070] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1647.190292][T27070] usb 6-1: Using ep0 maxpacket: 16 [ 1647.217701][T27070] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1647.232740][T27070] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1647.247482][T27070] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1647.274829][T27070] usb 6-1: Product: syz [ 1647.283969][T27070] usb 6-1: Manufacturer: syz [ 1647.293123][T27070] usb 6-1: SerialNumber: syz [ 1647.326491][T27070] usb 6-1: config 0 descriptor?? [ 1647.351988][T27070] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1647.379688][T27070] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 1647.960287][T27070] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1648.405603][T27070] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1648.415286][T27070] em28xx 6-1:0.0: board has no eeprom [ 1648.725015][T27070] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1648.732939][T27070] em28xx 6-1:0.0: dvb set to bulk mode. [ 1648.759676][ T5926] em28xx 6-1:0.0: Binding DVB extension [ 1648.970390][T27070] usb 6-1: USB disconnect, device number 61 [ 1649.033611][T27070] em28xx 6-1:0.0: Disconnecting em28xx [ 1649.482358][ T5926] em28xx 6-1:0.0: Registering input extension [ 1649.590501][T27070] em28xx 6-1:0.0: Closing input extension [ 1649.641013][T16320] bridge0: port 1(bridge_slave_0) entered blocking state [ 1649.696363][T27070] em28xx 6-1:0.0: Freeing device [ 1649.743159][T16320] bridge0: port 1(bridge_slave_0) entered disabled state [ 1649.856996][T16320] bridge_slave_0: entered allmulticast mode [ 1649.870513][T16320] bridge_slave_0: entered promiscuous mode [ 1649.924922][T16320] bridge0: port 2(bridge_slave_1) entered blocking state [ 1649.981712][T16320] bridge0: port 2(bridge_slave_1) entered disabled state [ 1650.079208][T16320] bridge_slave_1: entered allmulticast mode [ 1650.093566][T16320] bridge_slave_1: entered promiscuous mode [ 1650.382753][T16320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1650.466919][T16320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1650.918978][T16320] team0: Port device team_slave_0 added [ 1651.035434][T16320] team0: Port device team_slave_1 added [ 1651.854572][T16320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1651.861600][T16320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1652.049638][T16320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1652.086550][T16320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1652.093563][T16320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1652.392330][T16320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1653.225699][T16320] hsr_slave_0: entered promiscuous mode [ 1653.243113][T16320] hsr_slave_1: entered promiscuous mode [ 1653.272844][T16320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1653.282918][T16320] Cannot create hsr debugfs directory [ 1654.891072][T16995] bridge0: entered promiscuous mode [ 1654.903073][T16995] macvlan0: entered promiscuous mode [ 1655.977719][T17041] ip6gretap0: entered promiscuous mode [ 1656.123312][T17041] vlan2: entered promiscuous mode [ 1656.943665][T17073] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1659.335914][T16320] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1659.448227][T16320] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1659.535188][T16320] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1659.596803][T16320] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1660.218180][T16320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1660.377576][T16320] 8021q: adding VLAN 0 to HW filter on device team0 [ 1660.481030][T18920] bridge0: port 1(bridge_slave_0) entered blocking state [ 1660.488267][T18920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1660.756878][T18920] bridge0: port 2(bridge_slave_1) entered blocking state [ 1660.764150][T18920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1660.892402][T17171] netlink: 161716 bytes leftover after parsing attributes in process `syz.5.15111'. [ 1660.934135][T17171] net_ratelimit: 60 callbacks suppressed [ 1660.934158][T17171] netlink: zone id is out of range [ 1660.945976][T17171] netlink: zone id is out of range [ 1660.951619][T17171] netlink: zone id is out of range [ 1660.957279][T17171] netlink: zone id is out of range [ 1660.963389][T17171] netlink: zone id is out of range [ 1660.969191][T17171] netlink: zone id is out of range [ 1660.974949][T17171] netlink: zone id is out of range [ 1660.984808][T17171] netlink: zone id is out of range [ 1660.993877][T17171] netlink: zone id is out of range [ 1660.999054][T17171] netlink: zone id is out of range [ 1661.311208][T16320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1662.337121][T16320] veth0_vlan: entered promiscuous mode [ 1662.533102][T16320] veth1_vlan: entered promiscuous mode [ 1662.674551][T17191] netlink: 36 bytes leftover after parsing attributes in process `syz.6.15116'. [ 1662.715497][T16320] veth0_macvtap: entered promiscuous mode [ 1662.727573][T17193] loop6: detected capacity change from 0 to 63 [ 1662.772002][T16320] veth1_macvtap: entered promiscuous mode [ 1662.814751][T17196] Buffer I/O error on dev loop6, logical block 0, async page read [ 1662.929082][T17196] Buffer I/O error on dev loop6, logical block 1, async page read [ 1662.984632][T17196] Buffer I/O error on dev loop6, logical block 2, async page read [ 1663.002714][T17196] Buffer I/O error on dev loop6, logical block 3, async page read [ 1663.024377][T16320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1663.054170][T17191] Buffer I/O error on dev loop6, logical block 0, async page read [ 1663.089232][T17191] Buffer I/O error on dev loop6, logical block 1, async page read [ 1663.107719][T17191] Buffer I/O error on dev loop6, logical block 2, async page read [ 1663.154241][T17191] Buffer I/O error on dev loop6, logical block 3, async page read [ 1663.190010][T16320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1663.226599][ T6077] Buffer I/O error on dev loop6, logical block 0, async page read [ 1663.282638][ T6077] Buffer I/O error on dev loop6, logical block 1, async page read [ 1663.297239][T16320] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1663.352373][T16320] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1663.362698][T16320] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1663.393706][T16320] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1664.102811][T18918] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1664.144879][T17214] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15118'. [ 1664.299297][ T30] audit: type=1326 audit(1751073440.142:9516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17216 comm="syz.0.15120" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f997bf8e929 code=0x0 [ 1664.562059][T18918] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1665.035778][T18918] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1665.291774][T29968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1665.349852][T29968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1665.616436][T18918] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1665.770766][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1665.805927][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1667.471750][T17301] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1668.802805][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.809793][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.240674][T18918] bond0 (unregistering): left allmulticast mode [ 1670.313025][T18918] team0: Port device bond0 removed [ 1670.331863][T18918] bond0 (unregistering): Released all slaves [ 1670.751407][T18918] bond1 (unregistering): Released all slaves [ 1670.966190][T17308] netlink: 'syz.6.15129': attribute type 3 has an invalid length. [ 1670.976492][T17308] netlink: 'syz.6.15129': attribute type 3 has an invalid length. [ 1671.001673][T17308] netlink: 'syz.6.15129': attribute type 3 has an invalid length. [ 1671.044208][T17308] netlink: 'syz.6.15129': attribute type 3 has an invalid length. [ 1671.086800][T17308] netlink: 'syz.6.15129': attribute type 3 has an invalid length. [ 1671.122405][T17308] netlink: 'syz.6.15129': attribute type 3 has an invalid length. [ 1671.199829][T17308] netlink: 'syz.6.15129': attribute type 3 has an invalid length. [ 1671.228361][T17308] netlink: 'syz.6.15129': attribute type 3 has an invalid length. [ 1671.253076][T17308] netlink: 'syz.6.15129': attribute type 3 has an invalid length. [ 1671.291322][T17308] netlink: 'syz.6.15129': attribute type 3 has an invalid length. [ 1671.322997][T17331] tipc: Started in network mode [ 1671.329614][T17331] tipc: Node identity 4, cluster identity 4711 [ 1671.364012][T17331] tipc: Node number set to 4 [ 1671.378443][T18918] tipc: Left network mode [ 1671.587557][T17357] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15139'. [ 1671.737637][ T30] audit: type=1326 audit(1751073447.572:9517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17380 comm="syz.8.15140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8878e929 code=0x7ffc0000 [ 1671.833940][ T30] audit: type=1326 audit(1751073447.622:9518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17380 comm="syz.8.15140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac8878e929 code=0x7ffc0000 [ 1671.858657][ T30] audit: type=1326 audit(1751073447.622:9519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17380 comm="syz.8.15140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8878e929 code=0x7ffc0000 [ 1671.887863][ T30] audit: type=1326 audit(1751073447.622:9520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17380 comm="syz.8.15140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8878e929 code=0x7ffc0000 [ 1671.916053][ T30] audit: type=1326 audit(1751073447.622:9521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17380 comm="syz.8.15140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac8878e929 code=0x7ffc0000 [ 1671.945015][ T30] audit: type=1326 audit(1751073447.622:9522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17380 comm="syz.8.15140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8878e929 code=0x7ffc0000 [ 1672.008142][T17371] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 1672.019031][ T30] audit: type=1326 audit(1751073447.622:9523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17380 comm="syz.8.15140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8878e929 code=0x7ffc0000 [ 1672.048596][T17371] bond1: (slave vti0): Error -95 calling set_mac_address [ 1672.082503][ T30] audit: type=1326 audit(1751073447.632:9524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17380 comm="syz.8.15140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fac8878e929 code=0x7ffc0000 [ 1672.135321][ T30] audit: type=1326 audit(1751073447.632:9525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17380 comm="syz.8.15140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8878e929 code=0x7ffc0000 [ 1672.194355][T17384] vlan2: entered allmulticast mode [ 1672.198727][T27070] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1672.199612][T17384] bond1: entered allmulticast mode [ 1672.213847][T17384] bond1: (slave vlan2): Opening slave failed [ 1672.278130][ T30] audit: type=1326 audit(1751073447.632:9526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17380 comm="syz.8.15140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8878e929 code=0x7ffc0000 [ 1672.394801][T27070] usb 6-1: Using ep0 maxpacket: 8 [ 1672.417855][T27070] usb 6-1: config 0 has an invalid interface number: 151 but max is 1 [ 1672.455161][T27070] usb 6-1: config 0 has no interface number 1 [ 1672.471646][T27070] usb 6-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1672.503550][T27070] usb 6-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 1672.558433][T27070] usb 6-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 1672.616662][T27070] usb 6-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1672.654455][T27070] usb 6-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1672.703205][T27070] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 1672.713016][T18918] hsr_slave_0: left promiscuous mode [ 1672.739411][T27070] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1672.781764][T18918] hsr_slave_1: left promiscuous mode [ 1672.806446][T27070] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1672.859376][T27070] usb 6-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 1672.888868][T27070] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1672.902001][T27070] usb 6-1: Product: syz [ 1672.917411][T27070] usb 6-1: Manufacturer: syz [ 1672.941104][T27070] usb 6-1: SerialNumber: syz [ 1672.960560][T27070] usb 6-1: config 0 descriptor?? [ 1672.981727][T17347] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1673.040794][T27070] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1673.067788][T27070] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1673.189859][T27070] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 1673.430021][T27070] usb 6-1: USB disconnect, device number 62 [ 1674.225605][T27070] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1674.364006][ T5926] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1674.386361][T27070] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1674.407655][T27070] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1674.428531][T27070] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1674.444448][T27070] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1674.477096][T17514] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1674.497539][T27070] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1674.536374][ T5926] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1674.562005][ T5926] usb 6-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1674.607019][ T5926] usb 6-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 1674.621138][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1674.963764][T27733] usb 9-1: USB disconnect, device number 26 [ 1675.106270][ T5926] megaworld 0003:07B5:0312.00E2: hidraw0: USB HID v0.00 Device [HID 07b5:0312] on usb-dummy_hcd.5-1/input0 [ 1675.125160][ T5926] megaworld 0003:07B5:0312.00E2: no inputs found [ 1675.310780][ T5926] usb 6-1: USB disconnect, device number 63 [ 1675.469736][T17588] fido_id[17588]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1682.055290][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1682.055306][ T30] audit: type=1800 audit(1751073457.902:9542): pid=17697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.15176" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 1686.020657][T17771] tipc: Started in network mode [ 1686.034893][T17771] tipc: Node identity 5, cluster identity 4711 [ 1686.066301][T17771] tipc: Node number set to 5 [ 1686.218470][T17779] input: syz1 as /devices/virtual/input/input168 [ 1687.459632][T17790] loop4: detected capacity change from 0 to 7 [ 1688.044256][T17821] netlink: 4 bytes leftover after parsing attributes in process `syz.8.15198'. [ 1689.633877][T27070] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1689.813963][T27070] usb 9-1: Using ep0 maxpacket: 8 [ 1689.876855][T27070] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1689.928226][T27070] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1690.130730][T27070] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1690.141497][T27070] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1690.238756][T27070] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1690.304424][T27070] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1690.639137][T27070] usb 9-1: GET_CAPABILITIES returned 0 [ 1690.691567][T27070] usbtmc 9-1:16.0: can't read capabilities [ 1690.988025][T27070] usb 9-1: USB disconnect, device number 27 [ 1692.314428][ T5942] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1692.478122][ T5942] usb 9-1: config 0 has no interfaces? [ 1692.490307][ T5942] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1692.513889][T27070] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1692.518159][ T5942] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1692.773854][ T5942] usb 9-1: Product: syz [ 1692.804066][ T5942] usb 9-1: Manufacturer: syz [ 1692.808708][ T5942] usb 9-1: SerialNumber: syz [ 1693.023697][T27070] usb 6-1: Using ep0 maxpacket: 8 [ 1693.046741][ T5942] usb 9-1: config 0 descriptor?? [ 1693.087776][T27070] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1693.127587][T27070] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1693.197279][T17956] tipc: Enabling of bearer rejected, already enabled [ 1693.238084][T27070] usb 6-1: config 0 descriptor?? [ 1695.450393][T27733] usb 9-1: USB disconnect, device number 28 [ 1695.555858][T27070] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 1695.577896][T27070] asix 6-1:0.0: probe with driver asix failed with error -71 [ 1695.604703][T27070] usb 6-1: USB disconnect, device number 64 [ 1698.425008][ T30] audit: type=1800 audit(1751073474.262:9543): pid=18075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.15228" name="bus" dev="ramfs" ino=198317 res=0 errno=0 [ 1700.268760][ T30] audit: type=1800 audit(1751073476.112:9544): pid=18139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.15238" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1701.374149][T18176] fuse: Unknown parameter 'roltmode' [ 1702.680199][T18203] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1705.524324][ T5926] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1705.791739][ T5926] usb 6-1: Using ep0 maxpacket: 16 [ 1705.809359][ T5926] usb 6-1: config 0 has an invalid interface number: 250 but max is 0 [ 1705.828199][ T5926] usb 6-1: config 0 has no interface number 0 [ 1705.897402][ T5926] usb 6-1: config 0 interface 250 altsetting 1 bulk endpoint 0x4 has invalid maxpacket 1023 [ 1705.951102][ T5926] usb 6-1: config 0 interface 250 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 1706.088845][ T5926] usb 6-1: config 0 interface 250 altsetting 1 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 1706.114118][ T5927] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1706.175228][ T5926] usb 6-1: config 0 interface 250 has no altsetting 0 [ 1706.199506][ T5926] usb 6-1: New USB device found, idVendor=04e8, idProduct=689a, bcdDevice=88.04 [ 1706.221211][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1706.256776][ T5926] usb 6-1: Product: syz [ 1706.298230][ T5926] usb 6-1: Manufacturer: syz [ 1706.304419][ T5927] usb 9-1: Using ep0 maxpacket: 8 [ 1706.349318][ T5926] usb 6-1: SerialNumber: syz [ 1706.365172][ T5927] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1706.435265][ T5926] usb 6-1: config 0 descriptor?? [ 1706.441166][T18247] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1706.466531][ T5927] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1706.530175][ T5927] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1706.613873][ T5927] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1706.675464][T18247] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15255'. [ 1706.691930][ T5927] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1706.716925][ T5926] usb 6-1: USB disconnect, device number 65 [ 1706.735251][ T5927] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1707.167365][ T5927] usb 9-1: GET_CAPABILITIES returned 0 [ 1707.173037][ T5927] usbtmc 9-1:16.0: can't read capabilities [ 1707.433181][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1707.488476][T18306] bridge0: port 1(vlan2) entered blocking state [ 1707.523411][T18306] bridge0: port 1(vlan2) entered disabled state [ 1707.608742][ T48] usb 9-1: USB disconnect, device number 29 [ 1707.655853][T18306] vlan2: entered allmulticast mode [ 1707.751069][T18306] bond0: entered allmulticast mode [ 1713.163655][T18455] bridge_slave_0: left allmulticast mode [ 1713.221109][T18455] bridge_slave_0: left promiscuous mode [ 1713.281185][T18455] bridge0: port 1(bridge_slave_0) entered disabled state [ 1713.807086][T18472] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15284'. [ 1714.055951][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888032d0c400: rx timeout, send abort [ 1714.407962][T18455] bridge_slave_1: left allmulticast mode [ 1714.439819][T18455] bridge_slave_1: left promiscuous mode [ 1714.458056][T18455] bridge0: port 2(bridge_slave_1) entered disabled state [ 1714.543479][T18455] bond0: (slave bond_slave_0): Releasing backup interface [ 1714.557614][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805bc5d800: rx timeout, send abort [ 1714.566574][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888032d0c400: abort rx timeout. Force session deactivation [ 1714.603153][T18455] bond0: (slave bond_slave_1): Releasing backup interface [ 1714.763931][T18455] team0: Port device team_slave_0 removed [ 1714.850405][T18455] team0: Port device team_slave_1 removed [ 1714.874299][T18455] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1714.898700][T18455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1714.939268][T18455] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1714.970285][T18455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1715.066024][ C1] vxcan1 (unregistering): j1939_tp_rxtimer: 0xffff88805bc5d800: abort rx timeout. Force session deactivation [ 1715.296742][T18503] validate_nla: 35 callbacks suppressed [ 1715.296757][T18503] netlink: 'syz.8.15289': attribute type 1 has an invalid length. [ 1715.482054][T18503] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1715.630724][T18543] vlan2: entered allmulticast mode [ 1716.026703][T18543] bond1: entered allmulticast mode [ 1716.924267][T18575] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 1716.936196][T18575] File: /dev/nullb0 PID: 18575 Comm: syz.7.15293 [ 1716.955152][ T5927] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1717.515834][ T5927] usb 9-1: Using ep0 maxpacket: 16 [ 1717.544393][ T5927] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1717.626979][ T5927] usb 9-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1717.902667][ T5927] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1718.029269][ T5927] usb 9-1: config 0 descriptor?? [ 1718.070331][ T5927] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input169 [ 1718.321789][T18577] input: syz0 as /devices/virtual/input/input170 [ 1719.262771][ T30] audit: type=1326 audit(1751073495.102:9545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18628 comm="syz.5.15300" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9294f8e929 code=0x0 [ 1719.743472][ T5942] usb 9-1: USB disconnect, device number 30 [ 1719.749688][ T5188] bcm5974 9-1:0.0: could not read from device [ 1719.807597][ T5899] bcm5974 9-1:0.0: could not read from device [ 1720.210901][T18676] binder: BINDER_SET_CONTEXT_MGR already set [ 1720.231343][T18676] binder: 18675:18676 ioctl 4018620d 2000000000c0 returned -16 [ 1720.281388][T18676] binder: BINDER_SET_CONTEXT_MGR already set [ 1720.293104][T18676] binder: 18675:18676 ioctl 4018620d 200000000040 returned -16 [ 1722.006796][ T48] hid-generic 0000:007F:FFFFFFFE.00E3: unknown main item tag 0x0 [ 1722.033102][ T48] hid-generic 0000:007F:FFFFFFFE.00E3: unknown main item tag 0x0 [ 1722.041656][ T48] hid-generic 0000:007F:FFFFFFFE.00E3: unknown main item tag 0x0 [ 1722.067540][ T48] hid-generic 0000:007F:FFFFFFFE.00E3: unknown main item tag 0x0 [ 1722.104619][ T48] hid-generic 0000:007F:FFFFFFFE.00E3: unknown main item tag 0x0 [ 1722.131191][ T48] hid-generic 0000:007F:FFFFFFFE.00E3: unknown main item tag 0x0 [ 1722.163556][ T48] hid-generic 0000:007F:FFFFFFFE.00E3: unknown main item tag 0x0 [ 1722.192715][ T48] hid-generic 0000:007F:FFFFFFFE.00E3: unknown main item tag 0x0 [ 1722.223487][ T48] hid-generic 0000:007F:FFFFFFFE.00E3: unknown main item tag 0x0 [ 1722.265327][ T48] hid-generic 0000:007F:FFFFFFFE.00E3: unknown main item tag 0x0 [ 1722.291447][ T48] hid-generic 0000:007F:FFFFFFFE.00E3: unknown main item tag 0x0 [ 1722.328047][ T48] hid-generic 0000:007F:FFFFFFFE.00E3: unknown main item tag 0x0 [ 1722.359029][ T48] hid-generic 0000:007F:FFFFFFFE.00E3: unknown main item tag 0x0 [ 1722.378418][ T48] hid-generic 0000:007F:FFFFFFFE.00E3: unknown main item tag 0x0 [ 1722.388057][ T48] hid-generic 0000:007F:FFFFFFFE.00E3: unknown main item tag 0x0 [ 1722.397972][ T48] hid-generic 0000:007F:FFFFFFFE.00E3: unknown main item tag 0x0 [ 1722.409131][ T48] hid-generic 0000:007F:FFFFFFFE.00E3: unknown main item tag 0x0 [ 1722.419650][ T48] hid-generic 0000:007F:FFFFFFFE.00E3: unknown main item tag 0x0 [ 1722.436043][ T48] hid-generic 0000:007F:FFFFFFFE.00E3: unknown main item tag 0x0 [ 1722.466366][ T48] hid-generic 0000:007F:FFFFFFFE.00E3: unknown main item tag 0x0 [ 1722.497623][ T48] hid-generic 0000:007F:FFFFFFFE.00E3: unknown main item tag 0x0 [ 1722.527182][ T48] hid-generic 0000:007F:FFFFFFFE.00E3: unknown main item tag 0x0 [ 1722.559482][ T48] hid-generic 0000:007F:FFFFFFFE.00E3: unknown main item tag 0x0 [ 1722.601946][ T48] hid-generic 0000:007F:FFFFFFFE.00E3: unknown main item tag 0x0 [ 1722.633410][ T48] hid-generic 0000:007F:FFFFFFFE.00E3: unknown main item tag 0x0 [ 1722.655863][ T48] hid-generic 0000:007F:FFFFFFFE.00E3: unknown main item tag 0x0 [ 1722.674204][ T48] hid-generic 0000:007F:FFFFFFFE.00E3: unknown main item tag 0x0 [ 1722.690613][ T48] hid-generic 0000:007F:FFFFFFFE.00E3: unknown main item tag 0x0 [ 1722.707253][ T48] hid-generic 0000:007F:FFFFFFFE.00E3: unknown main item tag 0x0 [ 1722.723956][ T48] hid-generic 0000:007F:FFFFFFFE.00E3: unknown main item tag 0x0 [ 1722.747303][ T48] hid-generic 0000:007F:FFFFFFFE.00E3: unknown main item tag 0x0 [ 1722.771584][ T48] hid-generic 0000:007F:FFFFFFFE.00E3: unknown main item tag 0x0 [ 1722.798099][ T48] hid-generic 0000:007F:FFFFFFFE.00E3: unknown main item tag 0x0 [ 1722.835613][ T48] hid-generic 0000:007F:FFFFFFFE.00E3: unknown main item tag 0x0 [ 1722.956519][ T48] hid-generic 0000:007F:FFFFFFFE.00E3: unknown main item tag 0x0 [ 1723.008615][ T48] hid-generic 0000:007F:FFFFFFFE.00E3: unknown main item tag 0x0 [ 1723.048204][ T48] hid-generic 0000:007F:FFFFFFFE.00E3: unknown main item tag 0x0 [ 1723.106804][ T48] hid-generic 0000:007F:FFFFFFFE.00E3: unknown main item tag 0x0 [ 1723.212591][ T48] hid-generic 0000:007F:FFFFFFFE.00E3: unknown main item tag 0x0 [ 1723.237368][ T48] hid-generic 0000:007F:FFFFFFFE.00E3: unknown main item tag 0x0 [ 1723.277782][ T48] hid-generic 0000:007F:FFFFFFFE.00E3: unknown main item tag 0x0 [ 1723.295000][ T48] hid-generic 0000:007F:FFFFFFFE.00E3: unknown main item tag 0x0 [ 1723.312658][ T48] hid-generic 0000:007F:FFFFFFFE.00E3: unknown main item tag 0x0 [ 1723.729392][ T48] hid-generic 0000:007F:FFFFFFFE.00E3: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1724.061273][T18773] fido_id[18773]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1724.236226][T18775] kvm: kvm [18771]: vcpu0, guest rIP: 0x2a3 Unhandled WRMSR(0xc1) = 0x8e00000035ff [ 1724.273459][T18775] kvm: kvm [18771]: vcpu0, guest rIP: 0x2a3 Unhandled WRMSR(0xc1) = 0xa60000002dff [ 1724.385980][T18775] kvm: kvm [18771]: vcpu0, guest rIP: 0x2a3 Unhandled WRMSR(0xc1) = 0xb100000035ff [ 1724.438838][T18775] kvm: kvm [18771]: vcpu0, guest rIP: 0x2a3 Unhandled WRMSR(0xc2) = 0xd400000035ff [ 1724.472151][T18775] kvm: kvm [18771]: vcpu0, guest rIP: 0x2a3 Unhandled WRMSR(0xc1) = 0xea0000002dff [ 1724.541071][T18775] kvm: kvm [18771]: vcpu0, guest rIP: 0x2a3 Unhandled WRMSR(0xc1) = 0x600000035ff [ 1724.572993][T18775] kvm: kvm [18771]: vcpu0, guest rIP: 0x2a3 Unhandled WRMSR(0xc2) = 0x5200000022ff [ 1726.640992][ T30] audit: type=1804 audit(1751073502.472:9546): pid=18832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.15324" name="/newroot/1094/file1" dev="fuse" ino=1 res=1 errno=0 [ 1728.768254][T18869] netlink: 28 bytes leftover after parsing attributes in process `syz.5.15329'. [ 1728.973960][T18869] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15329'. [ 1730.243085][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.250891][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.707297][T18915] netlink: 28 bytes leftover after parsing attributes in process `syz.8.15338'. [ 1730.716985][T18915] netlink: 28 bytes leftover after parsing attributes in process `syz.8.15338'. [ 1730.737670][T18915] ip6gretap0: entered promiscuous mode [ 1730.745772][T18915] syz_tun: entered promiscuous mode [ 1730.842734][ T30] audit: type=1326 audit(1751073506.682:9547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18902 comm="syz.7.15336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f10ef12ab19 code=0x7ffc0000 [ 1730.993558][ T30] audit: type=1326 audit(1751073506.682:9548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18902 comm="syz.7.15336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10ef18e929 code=0x7ffc0000 [ 1731.044725][ T30] audit: type=1326 audit(1751073506.682:9549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18902 comm="syz.7.15336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f10ef12ab19 code=0x7ffc0000 [ 1731.194685][ T30] audit: type=1326 audit(1751073506.682:9550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18902 comm="syz.7.15336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10ef18e929 code=0x7ffc0000 [ 1731.416246][ T30] audit: type=1326 audit(1751073506.692:9551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18902 comm="syz.7.15336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f10ef12ab19 code=0x7ffc0000 [ 1731.480626][ T30] audit: type=1326 audit(1751073506.692:9552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18902 comm="syz.7.15336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f10ef12ab19 code=0x7ffc0000 [ 1731.571865][ T30] audit: type=1326 audit(1751073506.692:9553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18902 comm="syz.7.15336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f10ef12ab19 code=0x7ffc0000 [ 1731.627583][ T30] audit: type=1326 audit(1751073506.692:9554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18902 comm="syz.7.15336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f10ef12ab19 code=0x7ffc0000 [ 1731.677652][T18937] netlink: 36 bytes leftover after parsing attributes in process `syz.5.15341'. [ 1731.687458][T18937] netlink: 16 bytes leftover after parsing attributes in process `syz.5.15341'. [ 1731.705239][T18937] netlink: 36 bytes leftover after parsing attributes in process `syz.5.15341'. [ 1731.735131][ T30] audit: type=1326 audit(1751073506.692:9555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18902 comm="syz.7.15336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f10ef12ab19 code=0x7ffc0000 [ 1731.761507][T18937] netlink: 36 bytes leftover after parsing attributes in process `syz.5.15341'. [ 1731.833312][ T30] audit: type=1326 audit(1751073506.692:9556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18902 comm="syz.7.15336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f10ef12ab19 code=0x7ffc0000 [ 1731.979000][ T30] audit: type=1326 audit(1751073506.692:9557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18902 comm="syz.7.15336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f10ef12ab19 code=0x7ffc0000 [ 1732.119369][ T30] audit: type=1326 audit(1751073506.692:9558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18902 comm="syz.7.15336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f10ef12ab19 code=0x7ffc0000 [ 1732.220168][ T30] audit: type=1326 audit(1751073506.692:9559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18902 comm="syz.7.15336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f10ef12ab19 code=0x7ffc0000 [ 1732.246053][ T30] audit: type=1326 audit(1751073506.692:9560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18902 comm="syz.7.15336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f10ef12ab19 code=0x7ffc0000 [ 1732.275474][ T30] audit: type=1326 audit(1751073506.692:9561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18902 comm="syz.7.15336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f10ef12ab19 code=0x7ffc0000 [ 1732.306333][ T30] audit: type=1326 audit(1751073506.692:9562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18902 comm="syz.7.15336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f10ef12ab19 code=0x7ffc0000 [ 1732.424628][ T30] audit: type=1326 audit(1751073506.692:9563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18902 comm="syz.7.15336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f10ef12ab19 code=0x7ffc0000 [ 1732.573467][ T30] audit: type=1326 audit(1751073506.692:9564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18902 comm="syz.7.15336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f10ef12ab19 code=0x7ffc0000 [ 1735.726658][T19023] vlan2: entered promiscuous mode [ 1739.491379][T19101] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1745.940163][T19220] syz_tun: entered allmulticast mode [ 1746.506883][T19219] syz_tun: left allmulticast mode [ 1747.177050][ T3124] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1747.518942][ T3124] usb 9-1: Using ep0 maxpacket: 32 [ 1747.526663][ T3124] usb 9-1: config 0 has an invalid interface number: 184 but max is 11 [ 1747.554433][ T3124] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 12 [ 1747.593361][ T3124] usb 9-1: config 0 has no interface number 0 [ 1747.656492][ T3124] usb 9-1: config 0 interface 184 has no altsetting 0 [ 1747.720480][ T3124] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1747.767376][ T3124] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1747.889008][ T3124] usb 9-1: Product: syz [ 1747.920291][ T3124] usb 9-1: Manufacturer: syz [ 1748.006361][ T3124] usb 9-1: SerialNumber: syz [ 1748.318268][ T3124] usb 9-1: config 0 descriptor?? [ 1748.678545][ T3124] smsc75xx v1.0.0 [ 1749.177543][T19296] syzkaller0: entered promiscuous mode [ 1749.193903][T19296] syzkaller0: entered allmulticast mode [ 1749.306233][ T3124] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1749.317954][ T3124] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1750.842575][ T3124] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1750.854216][ T3124] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1750.904045][ T3124] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1750.928003][ T3124] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -71 [ 1750.955349][ T3124] usb 9-1: USB disconnect, device number 31 [ 1757.554024][ T5843] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1757.749709][ T5843] usb 9-1: Using ep0 maxpacket: 8 [ 1757.778603][ T5843] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1757.808467][ T5843] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1757.824490][ T5843] usb 9-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 1757.837142][ T5843] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1757.859727][ T5843] usb 9-1: config 0 descriptor?? [ 1758.170189][ T5843] usbhid 9-1:0.0: can't add hid device: -71 [ 1758.176497][ T5843] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1758.253426][ T5843] usb 9-1: USB disconnect, device number 32 [ 1758.725695][T19459] netlink: 24 bytes leftover after parsing attributes in process `syz.6.15408'. [ 1760.563817][T19516] : entered promiscuous mode [ 1760.864118][T27733] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1761.057584][T27733] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1761.091620][T27733] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1761.187740][T27733] usb 6-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 1761.462975][T27733] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1761.501077][T27733] usb 6-1: config 0 descriptor?? [ 1761.764094][T19505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1761.773042][T19505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1761.872795][T27733] usb 6-1: USB disconnect, device number 66 [ 1763.046191][ T2933] Bluetooth: hci3: command 0x0406 tx timeout [ 1763.309048][T19590] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1765.029819][T19643] binder: 19640:19643 ioctl c0306201 200000000240 returned -14 [ 1765.329657][ T30] kauditd_printk_skb: 193 callbacks suppressed [ 1765.329678][ T30] audit: type=1326 audit(1751073541.172:9758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19656 comm="syz.8.15430" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac8878e929 code=0x0 [ 1767.195240][ T5843] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1767.451358][T27733] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1767.573846][ T5843] usb 6-1: Using ep0 maxpacket: 32 [ 1767.581962][ T5843] usb 6-1: config 0 has an invalid interface number: 146 but max is 0 [ 1767.615868][ T5843] usb 6-1: config 0 has no interface number 0 [ 1767.654793][ T30] audit: type=1800 audit(1751073543.462:9759): pid=19715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.15440" name="dmabuf" dev="dmabuf" ino=37 res=0 errno=0 [ 1767.686265][T27733] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1767.728403][ T5843] usb 6-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1767.759924][T27733] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1767.784262][ T5843] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1767.806925][T27733] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1767.840050][ T5843] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1767.873811][T27733] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1767.934162][ T5843] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1767.944603][T27733] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1767.953680][T27733] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1767.973869][ T5843] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1767.998072][ T5843] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1768.009499][T27733] usb 9-1: config 0 descriptor?? [ 1768.031208][ T5843] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1768.092983][ T5843] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 1768.137964][ T5843] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1768.175016][ T5843] usb 6-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1768.240652][ T5843] usb 6-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1768.270720][ T5843] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1768.313945][ T5843] usb 6-1: Product: syz [ 1768.318265][ T5843] usb 6-1: Manufacturer: syz [ 1768.323037][ T5843] usb 6-1: SerialNumber: syz [ 1768.400044][ T5843] usb 6-1: config 0 descriptor?? [ 1768.434832][T19689] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1768.454213][T19689] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1768.483186][ T5843] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 1768.505302][T27733] plantronics 0003:047F:FFFF.00E4: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1768.547501][ T5843] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 1768.615454][ T5843] scsi host1: microtekX6 [ 1768.870364][T19761] input: syz1 as /devices/virtual/input/input172 [ 1769.434135][ T5843] usb 6-1: USB disconnect, device number 67 [ 1771.080550][T15865] usb 9-1: USB disconnect, device number 33 [ 1771.656002][T15865] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1771.967102][T15865] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1772.097490][T15865] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1772.183374][T15865] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1772.247499][T15865] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1772.303818][T15865] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1772.333376][T15865] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1772.436135][T15865] usb 9-1: config 0 descriptor?? [ 1772.691739][T19867] netlink: 24 bytes leftover after parsing attributes in process `syz.7.15452'. [ 1772.920113][T19882] binder: BINDER_SET_CONTEXT_MGR already set [ 1772.970517][T15865] plantronics 0003:047F:FFFF.00E5: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1773.004217][T19882] binder: 19879:19882 ioctl 4018620d 2000000000c0 returned -16 [ 1773.075115][T19882] binder: BINDER_SET_CONTEXT_MGR already set [ 1773.125285][T19882] binder: 19879:19882 ioctl 4018620d 200000000040 returned -16 [ 1774.818947][T19935] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1774.902615][ T10] usb 9-1: reset high-speed USB device number 34 using dummy_hcd [ 1775.894968][ T5835] usb 9-1: USB disconnect, device number 34 [ 1776.133024][T19982] bridge0: entered promiscuous mode [ 1776.149493][T19982] batman_adv: batadv0: Adding interface: macsec1 [ 1776.194790][T19978] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1776.202045][T19978] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1776.210088][T19978] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1776.223123][T19982] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1776.248644][ C1] vkms_vblank_simulate: vblank timer overrun [ 1776.272790][T19978] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1776.288986][T19978] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1776.299826][T19978] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1776.307194][T19978] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1776.337004][T19978] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1776.348503][T19978] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1776.358925][T19982] batman_adv: batadv0: Interface activated: macsec1 [ 1776.373325][T19978] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1776.998655][T20002] input: syz1 as /devices/virtual/input/input174 [ 1777.447577][ T30] audit: type=1804 audit(1751073553.272:9760): pid=20016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.15466" name="/newroot/176/file1" dev="fuse" ino=1 res=1 errno=0 [ 1777.756169][T20029] netlink: 'syz.0.15468': attribute type 4 has an invalid length. [ 1782.724353][ T48] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1782.913969][ T48] usb 6-1: Using ep0 maxpacket: 16 [ 1782.960979][ T48] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 1782.993843][ T48] usb 6-1: config 0 has no interface number 0 [ 1783.029181][ T48] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1783.083845][ T48] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1783.132707][ T48] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1783.188096][ T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1783.259692][ T48] usb 6-1: Product: syz [ 1783.349695][ T48] usb 6-1: Manufacturer: syz [ 1783.428867][ T48] usb 6-1: SerialNumber: syz [ 1783.484056][ T48] usb 6-1: config 0 descriptor?? [ 1783.493924][T20117] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1783.502273][T20117] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1783.960731][T20117] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1784.236378][T20117] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1786.901368][ T48] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0002: -71 [ 1786.978313][ T48] asix 6-1:0.251 (unnamed net_device) (uninitialized): Could not register MDIO bus [ 1786.993371][ T48] asix 6-1:0.251: probe with driver asix failed with error -5 [ 1787.101272][ T48] usb 6-1: USB disconnect, device number 68 [ 1787.113905][ T30] audit: type=1800 audit(1751073562.922:9761): pid=20208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.15490" name="/" dev="fuse" ino=0 res=0 errno=0 [ 1787.274056][T12380] Bluetooth: hci0: unexpected event for opcode 0x2003 [ 1787.281478][T12380] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 1787.299979][T12380] CPU: 0 UID: 0 PID: 12380 Comm: kworker/u9:3 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 1787.300010][T12380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1787.300026][T12380] Workqueue: hci0 hci_rx_work [ 1787.300065][T12380] Call Trace: [ 1787.300075][T12380] [ 1787.300085][T12380] dump_stack_lvl+0x189/0x250 [ 1787.300124][T12380] ? kernfs_path_from_node+0x2c/0x260 [ 1787.300153][T12380] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1787.300189][T12380] ? __pfx__printk+0x10/0x10 [ 1787.300216][T12380] ? kernfs_path_from_node+0x2c/0x260 [ 1787.300240][T12380] ? kernfs_path_from_node+0x2c/0x260 [ 1787.300278][T12380] ? kernfs_path_from_node+0x22c/0x260 [ 1787.300304][T12380] ? kernfs_path_from_node+0x2c/0x260 [ 1787.300334][T12380] sysfs_create_dir_ns+0x259/0x280 [ 1787.300364][T12380] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1787.300392][T12380] ? do_raw_spin_unlock+0x122/0x240 [ 1787.300424][T12380] kobject_add_internal+0x59f/0xb40 [ 1787.300457][T12380] kobject_add+0x155/0x220 [ 1787.300498][T12380] ? __pfx_kobject_add+0x10/0x10 [ 1787.300534][T12380] ? _raw_spin_unlock+0x28/0x50 [ 1787.300566][T12380] ? get_device_parent+0x366/0x3a0 [ 1787.300595][T12380] device_add+0x408/0xb50 [ 1787.300633][T12380] hci_conn_add_sysfs+0xd5/0x1e0 [ 1787.300676][T12380] le_conn_complete_evt+0xc3a/0x1220 [ 1787.300714][T12380] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1787.300736][T12380] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1787.300765][T12380] ? __asan_memcpy+0x40/0x70 [ 1787.300795][T12380] ? __pfx___mutex_lock+0x10/0x10 [ 1787.300825][T12380] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1787.300854][T12380] ? skb_pull_data+0xfb/0x200 [ 1787.300886][T12380] hci_le_conn_complete_evt+0x187/0x450 [ 1787.300915][T12380] hci_event_packet+0x78f/0x1200 [ 1787.300948][T12380] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1787.300972][T12380] ? __pfx_hci_event_packet+0x10/0x10 [ 1787.301003][T12380] ? kcov_remote_start+0x4d3/0x7f0 [ 1787.301046][T12380] ? warn_bogus_irq_restore+0x30/0x40 [ 1787.301080][T12380] ? hci_send_to_monitor+0xe2/0x570 [ 1787.301107][T12380] hci_rx_work+0x46a/0xe80 [ 1787.301146][T12380] ? process_scheduled_works+0x9ef/0x17b0 [ 1787.301182][T12380] process_scheduled_works+0xae1/0x17b0 [ 1787.301246][T12380] ? __pfx_process_scheduled_works+0x10/0x10 [ 1787.301307][T12380] worker_thread+0x8a0/0xda0 [ 1787.301343][T12380] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1787.301381][T12380] ? __kthread_parkme+0x7b/0x200 [ 1787.301413][T12380] kthread+0x70e/0x8a0 [ 1787.301440][T12380] ? __pfx_worker_thread+0x10/0x10 [ 1787.301471][T12380] ? __pfx_kthread+0x10/0x10 [ 1787.301498][T12380] ? _raw_spin_unlock_irq+0x23/0x50 [ 1787.301526][T12380] ? lockdep_hardirqs_on+0x9c/0x150 [ 1787.301553][T12380] ? __pfx_kthread+0x10/0x10 [ 1787.301579][T12380] ret_from_fork+0x3fc/0x770 [ 1787.301612][T12380] ? __pfx_ret_from_fork+0x10/0x10 [ 1787.301646][T12380] ? __switch_to_asm+0x39/0x70 [ 1787.301666][T12380] ? __switch_to_asm+0x33/0x70 [ 1787.301687][T12380] ? __pfx_kthread+0x10/0x10 [ 1787.301711][T12380] ret_from_fork_asm+0x1a/0x30 [ 1787.301750][T12380] [ 1787.301782][T12380] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1787.623884][T12380] Bluetooth: hci0: failed to register connection device [ 1789.280723][T20259] bridge0: entered promiscuous mode [ 1789.340973][T20259] vlan3: entered promiscuous mode [ 1789.673995][T12380] Bluetooth: hci0: command 0x0406 tx timeout [ 1791.719511][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.725940][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.864822][T20305] bridge0: port 3(vlan3) entered blocking state [ 1791.871239][T20305] bridge0: port 3(vlan3) entered disabled state [ 1791.917494][T20305] vlan3: entered allmulticast mode [ 1791.971174][T20305] bond0: entered allmulticast mode [ 1791.977889][T20305] bond_slave_0: entered allmulticast mode [ 1792.013895][T20305] bond_slave_1: entered allmulticast mode [ 1792.103582][T20305] vlan3: entered promiscuous mode [ 1792.129067][T20305] bond0: entered promiscuous mode [ 1792.181925][T20305] bond_slave_0: entered promiscuous mode [ 1792.249273][T20305] bond_slave_1: entered promiscuous mode [ 1792.257492][T20327] netlink: 12 bytes leftover after parsing attributes in process `syz.7.15505'. [ 1794.121732][T20378] netlink: 'syz.8.15512': attribute type 10 has an invalid length. [ 1794.355035][T20378] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1799.192308][ T30] audit: type=1326 audit(1751073575.032:9762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20455 comm="syz.7.15524" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f10ef18e929 code=0x0 [ 1802.668208][ T30] audit: type=1326 audit(1751073578.502:9763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20545 comm="syz.6.15532" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb97f8e929 code=0x0 [ 1803.248795][ T5927] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1803.434073][ T5927] usb 6-1: Using ep0 maxpacket: 32 [ 1803.445910][ T5927] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1803.467992][ T5927] usb 6-1: config 0 has no interface number 0 [ 1803.481620][ T5927] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1803.554353][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1803.562482][ T5927] usb 6-1: Product: syz [ 1803.566994][ T5927] usb 6-1: Manufacturer: syz [ 1803.572532][ T5927] usb 6-1: SerialNumber: syz [ 1803.589210][ T5927] usb 6-1: config 0 descriptor?? [ 1803.609669][ T5927] smsc95xx v2.0.0 [ 1804.054686][ T5927] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1804.150905][ T5927] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1804.765300][T20677] ip6t_srh: unknown srh invflags 7863 [ 1805.031301][T20684] netlink: 16 bytes leftover after parsing attributes in process `syz.7.15551'. [ 1805.153031][T20684] ip6gretap0: entered promiscuous mode [ 1805.195184][T20684] ip6gretap0: left promiscuous mode [ 1805.786198][ T5927] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -32 [ 1805.797637][ T5927] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -32 [ 1805.830524][ T5927] usb 6-1: USB disconnect, device number 69 [ 1807.969213][T20755] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1808.395522][T20765] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1808.402908][T20765] IPv6: NLM_F_CREATE should be set when creating new route [ 1808.410507][T20765] IPv6: NLM_F_CREATE should be set when creating new route [ 1808.417803][T20765] IPv6: NLM_F_CREATE should be set when creating new route [ 1810.234131][ T3124] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1810.430442][T20804] syzkaller0: entered promiscuous mode [ 1810.495510][ T3124] usb 9-1: Using ep0 maxpacket: 16 [ 1810.513696][ T3124] usb 9-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1810.538169][T20804] syzkaller0: entered allmulticast mode [ 1810.539293][ T3124] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1810.589476][ T3124] usb 9-1: config 0 descriptor?? [ 1810.615497][ T3124] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1812.443855][ T923] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1812.738232][ T923] usb 6-1: Using ep0 maxpacket: 16 [ 1812.773900][ T923] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 1812.807994][ T923] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1813.188624][ T3124] gspca_sonixj: reg_w1 err -71 [ 1813.207034][ T3124] sonixj 9-1:0.0: probe with driver sonixj failed with error -71 [ 1813.232626][ T923] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1813.251114][ T3124] usb 9-1: USB disconnect, device number 35 [ 1813.345377][ T923] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1813.409689][ T923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1813.464212][ T923] usb 6-1: SerialNumber: syz [ 1813.487841][T20833] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1813.742349][ T923] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 1813.829954][ T923] usb 6-1: USB disconnect, device number 70 [ 1820.513995][ T923] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1820.736108][ T923] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1820.765429][ T923] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1820.780413][ T923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1820.792904][ T923] usb 6-1: SerialNumber: syz [ 1821.084790][T20982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1821.094138][T20982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1821.139468][T20982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1821.151218][T20982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1821.186399][ T923] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 1821.583496][ T923] usb 6-1: USB disconnect, device number 71 [ 1827.229273][T21168] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1827.824853][T21195] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1827.874573][T21195] batadv_slave_0: entered promiscuous mode [ 1828.454759][T21206] input: syz0 as /devices/virtual/input/input175 [ 1838.589200][ T5926] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1838.765323][ T5926] usb 6-1: Using ep0 maxpacket: 8 [ 1838.782265][ T5926] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1838.814395][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1838.846244][ T5926] usb 6-1: Product: syz [ 1838.874019][ T5926] usb 6-1: Manufacturer: syz [ 1838.923366][ T5926] usb 6-1: SerialNumber: syz [ 1838.983032][ T5926] usb 6-1: config 0 descriptor?? [ 1839.026668][ T5926] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1839.564203][ T5926] gspca_sq905: sq905_command: usb_control_msg failed (-110) [ 1839.609994][ T5926] sq905 6-1:0.0: probe with driver sq905 failed with error -110 [ 1840.513862][ T5926] usb 6-1: USB disconnect, device number 72 [ 1840.583588][T21446] netlink: 4 bytes leftover after parsing attributes in process `syz.8.15659'. [ 1842.226434][T21490] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1843.199675][ T30] audit: type=1804 audit(1751073619.042:9764): pid=21513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.15669" name="/newroot/440/file1" dev="fuse" ino=1 res=1 errno=0 [ 1844.821711][T21558] tipc: Failed to remove unknown binding: 66,1,1/5:943787751/943787753 [ 1844.831348][T21558] tipc: Failed to remove unknown binding: 66,1,1/5:943787751/943787753 [ 1845.623997][ T48] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1845.794264][ T48] usb 9-1: Using ep0 maxpacket: 8 [ 1845.805879][ T48] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1845.823893][ T48] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1845.832204][ T48] usb 9-1: Product: syz [ 1845.837028][ T48] usb 9-1: Manufacturer: syz [ 1845.841662][ T48] usb 9-1: SerialNumber: syz [ 1845.867594][ T48] usb 9-1: config 0 descriptor?? [ 1846.433860][ T48] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1847.430555][T21606] tipc: Enabled bearer , priority 0 [ 1847.464424][T21606] syzkaller0: entered promiscuous mode [ 1847.482228][T21606] syzkaller0: entered allmulticast mode [ 1847.495699][T21606] tipc: Resetting bearer [ 1847.564106][T21605] tipc: Resetting bearer [ 1847.609307][T21605] tipc: Disabling bearer [ 1847.878251][ T48] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1847.945170][ T48] usb 9-1: USB disconnect, device number 36 [ 1848.853498][T21679] binder: BINDER_SET_CONTEXT_MGR already set [ 1848.865140][T21679] binder: 21675:21679 ioctl 4018620d 200000000040 returned -16 [ 1848.879779][T21679] binder: 21675:21679 ioctl c0306201 200000000240 returned -11 [ 1852.399769][ T48] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1852.743846][ T48] usb 6-1: Using ep0 maxpacket: 32 [ 1852.777969][ T48] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1852.786357][ T48] usb 6-1: config 0 has no interface number 0 [ 1852.796941][ T48] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1852.813893][ T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1852.822147][ T48] usb 6-1: Product: syz [ 1852.826555][ T48] usb 6-1: Manufacturer: syz [ 1852.831204][ T48] usb 6-1: SerialNumber: syz [ 1852.839245][ T48] usb 6-1: config 0 descriptor?? [ 1852.893989][ T48] smsc95xx v2.0.0 [ 1853.065917][T21776] netlink: 'syz.6.15705': attribute type 4 has an invalid length. [ 1853.125387][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.135035][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.157906][T21780] netlink: 'syz.6.15705': attribute type 4 has an invalid length. [ 1853.280153][ T48] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1853.353739][ T48] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1855.578271][ T48] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -71 [ 1855.602381][ T48] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 1855.665164][ T48] usb 6-1: USB disconnect, device number 73 [ 1860.661551][T21934] syz.8.15731(21934): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 1863.849171][ T5843] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 1864.883816][ T5843] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1864.893644][ T5843] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1864.901664][ T5843] usb 9-1: can't read configurations, error -71 [ 1867.377974][ T30] audit: type=1800 audit(1751073643.222:9765): pid=22034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.15747" name="/" dev="fuse" ino=0 res=0 errno=0 [ 1868.623894][ T3124] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 1868.804017][ T3124] usb 9-1: Using ep0 maxpacket: 32 [ 1868.826473][ T3124] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 1868.867362][ T3124] usb 9-1: config 0 has no interface number 0 [ 1868.932466][ T3124] usb 9-1: config 0 interface 12 has no altsetting 0 [ 1868.976358][ T3124] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1869.008774][ T3124] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1869.048960][ T3124] usb 9-1: Product: syz [ 1869.069574][ T3124] usb 9-1: Manufacturer: syz [ 1869.117394][ T3124] usb 9-1: SerialNumber: syz [ 1869.170664][ T3124] usb 9-1: config 0 descriptor?? [ 1872.327992][ T3124] f81534 9-1:0.12: f81534_set_register: reg: 1001 data: f1 failed: -71 [ 1872.453213][ T3124] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71 [ 1872.524562][ T3124] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1872.532441][ T3124] f81534 9-1:0.12: probe with driver f81534 failed with error -71 [ 1872.577611][ T3124] usb 9-1: USB disconnect, device number 39 [ 1874.264272][T22229] netlink: 'syz.7.15774': attribute type 3 has an invalid length. [ 1877.526701][T22291] binder: 22290:22291 ioctl c0306201 200000000780 returned -14 [ 1881.445739][ T30] audit: type=1804 audit(1751073657.292:9766): pid=22357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.15790" name="/newroot/1182/file1" dev="fuse" ino=1 res=1 errno=0 [ 1914.560629][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.567405][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.000362][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.007036][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.439830][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.446341][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2063.037525][ C1] net_ratelimit: 673 callbacks suppressed [ 2063.037543][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2098.879077][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.885706][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.326503][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.332948][ T1298] ieee802154 phy1 wpan1: encryption failed: -22